1. Packages
  2. AWS
  3. API Docs
  4. wafv2
  5. WebAcl
Viewing docs for AWS v5.43.0 (Older version)
published on Tuesday, Mar 10, 2026 by Pulumi
Go to latest version
Schema (JSON)
pulumi/pulumi-aws

aws.wafv2.WebAcl

aws logo
Viewing docs for AWS v5.43.0 (Older version)
published on Tuesday, Mar 10, 2026 by Pulumi
Go to latest version
Schema (JSON)
pulumi/pulumi-aws

    Creates a WAFv2 Web ACL resource.

    Note: In field_to_match blocks, e.g., in byte_match_statement, the body block includes an optional argument oversize_handling. AWS indicates this argument will be required starting February 2023. To avoid configurations breaking when that change happens, treat the oversize_handling argument as required as soon as possible.

    Example Usage

    Managed Rule

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var atp_example = new Aws.WafV2.WebAcl("atp-example", new()
    {
        DefaultAction = new Aws.WafV2.Inputs.WebAclDefaultActionArgs
        {
            Allow = null,
        },
        Description = "Example of a managed ATP rule.",
        Rules = new[]
        {
            new Aws.WafV2.Inputs.WebAclRuleArgs
            {
                Name = "atp-rule-1",
                OverrideAction = new Aws.WafV2.Inputs.WebAclRuleOverrideActionArgs
                {
                    Count = null,
                },
                Priority = 1,
                Statement = new Aws.WafV2.Inputs.WebAclRuleStatementArgs
                {
                    ManagedRuleGroupStatement = new Aws.WafV2.Inputs.WebAclRuleStatementManagedRuleGroupStatementArgs
                    {
                        ManagedRuleGroupConfigs = new[]
                        {
                            new Aws.WafV2.Inputs.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigArgs
                            {
                                AwsManagedRulesAtpRuleSet = new Aws.WafV2.Inputs.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetArgs
                                {
                                    LoginPath = "/api/1/signin",
                                    RequestInspection = new Aws.WafV2.Inputs.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionArgs
                                    {
                                        PasswordField = new Aws.WafV2.Inputs.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionPasswordFieldArgs
                                        {
                                            Identifier = "/password",
                                        },
                                        PayloadType = "JSON",
                                        UsernameField = new Aws.WafV2.Inputs.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionUsernameFieldArgs
                                        {
                                            Identifier = "/email",
                                        },
                                    },
                                    ResponseInspection = new Aws.WafV2.Inputs.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionArgs
                                    {
                                        StatusCode = new Aws.WafV2.Inputs.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionStatusCodeArgs
                                        {
                                            FailureCodes = new[]
                                            {
                                                403,
                                            },
                                            SuccessCodes = new[]
                                            {
                                                200,
                                            },
                                        },
                                    },
                                },
                            },
                        },
                        Name = "AWSManagedRulesATPRuleSet",
                        VendorName = "AWS",
                    },
                },
                VisibilityConfig = new Aws.WafV2.Inputs.WebAclRuleVisibilityConfigArgs
                {
                    CloudwatchMetricsEnabled = false,
                    MetricName = "friendly-rule-metric-name",
                    SampledRequestsEnabled = false,
                },
            },
        },
        Scope = "CLOUDFRONT",
        VisibilityConfig = new Aws.WafV2.Inputs.WebAclVisibilityConfigArgs
        {
            CloudwatchMetricsEnabled = false,
            MetricName = "friendly-metric-name",
            SampledRequestsEnabled = false,
        },
    });

});

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/wafv2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := wafv2.NewWebAcl(ctx, "atp-example", &wafv2.WebAclArgs{
			DefaultAction: &wafv2.WebAclDefaultActionArgs{
				Allow: nil,
			},
			Description: pulumi.String("Example of a managed ATP rule."),
			Rules: wafv2.WebAclRuleArray{
				&wafv2.WebAclRuleArgs{
					Name: pulumi.String("atp-rule-1"),
					OverrideAction: &wafv2.WebAclRuleOverrideActionArgs{
						Count: nil,
					},
					Priority: pulumi.Int(1),
					Statement: &wafv2.WebAclRuleStatementArgs{
						ManagedRuleGroupStatement: &wafv2.WebAclRuleStatementManagedRuleGroupStatementArgs{
							ManagedRuleGroupConfigs: wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigArray{
								&wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigArgs{
									AwsManagedRulesAtpRuleSet: &wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetArgs{
										LoginPath: pulumi.String("/api/1/signin"),
										RequestInspection: &wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionArgs{
											PasswordField: &wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionPasswordFieldArgs{
												Identifier: pulumi.String("/password"),
											},
											PayloadType: pulumi.String("JSON"),
											UsernameField: &wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionUsernameFieldArgs{
												Identifier: pulumi.String("/email"),
											},
										},
										ResponseInspection: &wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionArgs{
											StatusCode: &wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionStatusCodeArgs{
												FailureCodes: pulumi.IntArray{
													pulumi.Int(403),
												},
												SuccessCodes: pulumi.IntArray{
													pulumi.Int(200),
												},
											},
										},
									},
								},
							},
							Name:       pulumi.String("AWSManagedRulesATPRuleSet"),
							VendorName: pulumi.String("AWS"),
						},
					},
					VisibilityConfig: &wafv2.WebAclRuleVisibilityConfigArgs{
						CloudwatchMetricsEnabled: pulumi.Bool(false),
						MetricName:               pulumi.String("friendly-rule-metric-name"),
						SampledRequestsEnabled:   pulumi.Bool(false),
					},
				},
			},
			Scope: pulumi.String("CLOUDFRONT"),
			VisibilityConfig: &wafv2.WebAclVisibilityConfigArgs{
				CloudwatchMetricsEnabled: pulumi.Bool(false),
				MetricName:               pulumi.String("friendly-metric-name"),
				SampledRequestsEnabled:   pulumi.Bool(false),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.wafv2.WebAcl;
import com.pulumi.aws.wafv2.WebAclArgs;
import com.pulumi.aws.wafv2.inputs.WebAclDefaultActionArgs;
import com.pulumi.aws.wafv2.inputs.WebAclDefaultActionAllowArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleOverrideActionArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleOverrideActionCountArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementManagedRuleGroupStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementGeoMatchStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleVisibilityConfigArgs;
import com.pulumi.aws.wafv2.inputs.WebAclVisibilityConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new WebAcl("example", WebAclArgs.builder()        
            .defaultAction(WebAclDefaultActionArgs.builder()
                .allow()
                .build())
            .description("Example of a managed rule.")
            .rules(WebAclRuleArgs.builder()
                .name("rule-1")
                .overrideAction(WebAclRuleOverrideActionArgs.builder()
                    .count()
                    .build())
                .priority(1)
                .statement(WebAclRuleStatementArgs.builder()
                    .managedRuleGroupStatement(WebAclRuleStatementManagedRuleGroupStatementArgs.builder()
                        .name("AWSManagedRulesCommonRuleSet")
                        .ruleActionOverride(                        
                            %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
                            %!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                        .scopeDownStatement(WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementArgs.builder()
                            .geoMatchStatement(WebAclRuleStatementManagedRuleGroupStatementScopeDownStatementGeoMatchStatementArgs.builder()
                                .countryCodes(                                
                                    "US",
                                    "NL")
                                .build())
                            .build())
                        .vendorName("AWS")
                        .build())
                    .build())
                .tokenDomains(                
                    "mywebsite.com",
                    "myotherwebsite.com")
                .visibilityConfig(WebAclRuleVisibilityConfigArgs.builder()
                    .cloudwatchMetricsEnabled(false)
                    .metricName("friendly-rule-metric-name")
                    .sampledRequestsEnabled(false)
                    .build())
                .build())
            .scope("REGIONAL")
            .tags(Map.ofEntries(
                Map.entry("Tag1", "Value1"),
                Map.entry("Tag2", "Value2")
            ))
            .visibilityConfig(WebAclVisibilityConfigArgs.builder()
                .cloudwatchMetricsEnabled(false)
                .metricName("friendly-metric-name")
                .sampledRequestsEnabled(false)
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const atp_example = new aws.wafv2.WebAcl("atp-example", {
    defaultAction: {
        allow: {},
    },
    description: "Example of a managed ATP rule.",
    rules: [{
        name: "atp-rule-1",
        overrideAction: {
            count: {},
        },
        priority: 1,
        statement: {
            managedRuleGroupStatement: {
                managedRuleGroupConfigs: [{
                    awsManagedRulesAtpRuleSet: {
                        loginPath: "/api/1/signin",
                        requestInspection: {
                            passwordField: {
                                identifier: "/password",
                            },
                            payloadType: "JSON",
                            usernameField: {
                                identifier: "/email",
                            },
                        },
                        responseInspection: {
                            statusCode: {
                                failureCodes: [403],
                                successCodes: [200],
                            },
                        },
                    },
                }],
                name: "AWSManagedRulesATPRuleSet",
                vendorName: "AWS",
            },
        },
        visibilityConfig: {
            cloudwatchMetricsEnabled: false,
            metricName: "friendly-rule-metric-name",
            sampledRequestsEnabled: false,
        },
    }],
    scope: "CLOUDFRONT",
    visibilityConfig: {
        cloudwatchMetricsEnabled: false,
        metricName: "friendly-metric-name",
        sampledRequestsEnabled: false,
    },
});

    import pulumi
import pulumi_aws as aws

atp_example = aws.wafv2.WebAcl("atp-example",
    default_action=aws.wafv2.WebAclDefaultActionArgs(
        allow=aws.wafv2.WebAclDefaultActionAllowArgs(),
    ),
    description="Example of a managed ATP rule.",
    rules=[aws.wafv2.WebAclRuleArgs(
        name="atp-rule-1",
        override_action=aws.wafv2.WebAclRuleOverrideActionArgs(
            count=aws.wafv2.WebAclRuleOverrideActionCountArgs(),
        ),
        priority=1,
        statement=aws.wafv2.WebAclRuleStatementArgs(
            managed_rule_group_statement=aws.wafv2.WebAclRuleStatementManagedRuleGroupStatementArgs(
                managed_rule_group_configs=[aws.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigArgs(
                    aws_managed_rules_atp_rule_set=aws.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetArgs(
                        login_path="/api/1/signin",
                        request_inspection=aws.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionArgs(
                            password_field=aws.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionPasswordFieldArgs(
                                identifier="/password",
                            ),
                            payload_type="JSON",
                            username_field=aws.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionUsernameFieldArgs(
                                identifier="/email",
                            ),
                        ),
                        response_inspection=aws.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionArgs(
                            status_code=aws.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionStatusCodeArgs(
                                failure_codes=[403],
                                success_codes=[200],
                            ),
                        ),
                    ),
                )],
                name="AWSManagedRulesATPRuleSet",
                vendor_name="AWS",
            ),
        ),
        visibility_config=aws.wafv2.WebAclRuleVisibilityConfigArgs(
            cloudwatch_metrics_enabled=False,
            metric_name="friendly-rule-metric-name",
            sampled_requests_enabled=False,
        ),
    )],
    scope="CLOUDFRONT",
    visibility_config=aws.wafv2.WebAclVisibilityConfigArgs(
        cloudwatch_metrics_enabled=False,
        metric_name="friendly-metric-name",
        sampled_requests_enabled=False,
    ))

    resources:
  example:
    type: aws:wafv2:WebAcl
    properties:
      defaultAction:
        allow: {}
      description: Example of a managed rule.
      rules:
        - name: rule-1
          overrideAction:
            count: {}
          priority: 1
          statement:
            managedRuleGroupStatement:
              name: AWSManagedRulesCommonRuleSet
              ruleActionOverride:
                - actionToUse:
                    count: {}
                  name: SizeRestrictions_QUERYSTRING
                - actionToUse:
                    count: {}
                  name: NoUserAgent_HEADER
              scopeDownStatement:
                geoMatchStatement:
                  countryCodes:
                    - US
                    - NL
              vendorName: AWS
          tokenDomains:
            - mywebsite.com
            - myotherwebsite.com
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: friendly-rule-metric-name
            sampledRequestsEnabled: false
      scope: REGIONAL
      tags:
        Tag1: Value1
        Tag2: Value2
      visibilityConfig:
        cloudwatchMetricsEnabled: false
        metricName: friendly-metric-name
        sampledRequestsEnabled: false

    Account Takeover Protection

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.WafV2.WebAcl("example", new()
    {
        DefaultAction = new Aws.WafV2.Inputs.WebAclDefaultActionArgs
        {
            Allow = null,
        },
        Description = "Example of a Cloudfront rate based statement.",
        Rules = new[]
        {
            new Aws.WafV2.Inputs.WebAclRuleArgs
            {
                Action = new Aws.WafV2.Inputs.WebAclRuleActionArgs
                {
                    Block = null,
                },
                Name = "rule-1",
                Priority = 1,
                Statement = new Aws.WafV2.Inputs.WebAclRuleStatementArgs
                {
                    RateBasedStatement = new Aws.WafV2.Inputs.WebAclRuleStatementRateBasedStatementArgs
                    {
                        AggregateKeyType = "IP",
                        Limit = 10000,
                        ScopeDownStatement = new Aws.WafV2.Inputs.WebAclRuleStatementRateBasedStatementScopeDownStatementArgs
                        {
                            GeoMatchStatement = new Aws.WafV2.Inputs.WebAclRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatementArgs
                            {
                                CountryCodes = new[]
                                {
                                    "US",
                                    "NL",
                                },
                            },
                        },
                    },
                },
                VisibilityConfig = new Aws.WafV2.Inputs.WebAclRuleVisibilityConfigArgs
                {
                    CloudwatchMetricsEnabled = false,
                    MetricName = "friendly-rule-metric-name",
                    SampledRequestsEnabled = false,
                },
            },
        },
        Scope = "CLOUDFRONT",
        Tags = 
        {
            { "Tag1", "Value1" },
            { "Tag2", "Value2" },
        },
        VisibilityConfig = new Aws.WafV2.Inputs.WebAclVisibilityConfigArgs
        {
            CloudwatchMetricsEnabled = false,
            MetricName = "friendly-metric-name",
            SampledRequestsEnabled = false,
        },
    });

});

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/wafv2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := wafv2.NewWebAcl(ctx, "example", &wafv2.WebAclArgs{
			DefaultAction: &wafv2.WebAclDefaultActionArgs{
				Allow: nil,
			},
			Description: pulumi.String("Example of a Cloudfront rate based statement."),
			Rules: wafv2.WebAclRuleArray{
				&wafv2.WebAclRuleArgs{
					Action: &wafv2.WebAclRuleActionArgs{
						Block: nil,
					},
					Name:     pulumi.String("rule-1"),
					Priority: pulumi.Int(1),
					Statement: &wafv2.WebAclRuleStatementArgs{
						RateBasedStatement: &wafv2.WebAclRuleStatementRateBasedStatementArgs{
							AggregateKeyType: pulumi.String("IP"),
							Limit:            pulumi.Int(10000),
							ScopeDownStatement: &wafv2.WebAclRuleStatementRateBasedStatementScopeDownStatementArgs{
								GeoMatchStatement: &wafv2.WebAclRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatementArgs{
									CountryCodes: pulumi.StringArray{
										pulumi.String("US"),
										pulumi.String("NL"),
									},
								},
							},
						},
					},
					VisibilityConfig: &wafv2.WebAclRuleVisibilityConfigArgs{
						CloudwatchMetricsEnabled: pulumi.Bool(false),
						MetricName:               pulumi.String("friendly-rule-metric-name"),
						SampledRequestsEnabled:   pulumi.Bool(false),
					},
				},
			},
			Scope: pulumi.String("CLOUDFRONT"),
			Tags: pulumi.StringMap{
				"Tag1": pulumi.String("Value1"),
				"Tag2": pulumi.String("Value2"),
			},
			VisibilityConfig: &wafv2.WebAclVisibilityConfigArgs{
				CloudwatchMetricsEnabled: pulumi.Bool(false),
				MetricName:               pulumi.String("friendly-metric-name"),
				SampledRequestsEnabled:   pulumi.Bool(false),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.wafv2.WebAcl;
import com.pulumi.aws.wafv2.WebAclArgs;
import com.pulumi.aws.wafv2.inputs.WebAclDefaultActionArgs;
import com.pulumi.aws.wafv2.inputs.WebAclDefaultActionAllowArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleOverrideActionArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleOverrideActionCountArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementManagedRuleGroupStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleVisibilityConfigArgs;
import com.pulumi.aws.wafv2.inputs.WebAclVisibilityConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var atp_example = new WebAcl("atp-example", WebAclArgs.builder()        
            .defaultAction(WebAclDefaultActionArgs.builder()
                .allow()
                .build())
            .description("Example of a managed ATP rule.")
            .rules(WebAclRuleArgs.builder()
                .name("atp-rule-1")
                .overrideAction(WebAclRuleOverrideActionArgs.builder()
                    .count()
                    .build())
                .priority(1)
                .statement(WebAclRuleStatementArgs.builder()
                    .managedRuleGroupStatement(WebAclRuleStatementManagedRuleGroupStatementArgs.builder()
                        .managedRuleGroupConfigs(WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigArgs.builder()
                            .awsManagedRulesAtpRuleSet(WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetArgs.builder()
                                .loginPath("/api/1/signin")
                                .requestInspection(WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionArgs.builder()
                                    .passwordField(WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionPasswordFieldArgs.builder()
                                        .identifier("/password")
                                        .build())
                                    .payloadType("JSON")
                                    .usernameField(WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionUsernameFieldArgs.builder()
                                        .identifier("/email")
                                        .build())
                                    .build())
                                .responseInspection(WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionArgs.builder()
                                    .statusCode(WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionStatusCodeArgs.builder()
                                        .failureCodes("403")
                                        .successCodes("200")
                                        .build())
                                    .build())
                                .build())
                            .build())
                        .name("AWSManagedRulesATPRuleSet")
                        .vendorName("AWS")
                        .build())
                    .build())
                .visibilityConfig(WebAclRuleVisibilityConfigArgs.builder()
                    .cloudwatchMetricsEnabled(false)
                    .metricName("friendly-rule-metric-name")
                    .sampledRequestsEnabled(false)
                    .build())
                .build())
            .scope("CLOUDFRONT")
            .visibilityConfig(WebAclVisibilityConfigArgs.builder()
                .cloudwatchMetricsEnabled(false)
                .metricName("friendly-metric-name")
                .sampledRequestsEnabled(false)
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.wafv2.WebAcl("example", {
    defaultAction: {
        allow: {},
    },
    description: "Example of a Cloudfront rate based statement.",
    rules: [{
        action: {
            block: {},
        },
        name: "rule-1",
        priority: 1,
        statement: {
            rateBasedStatement: {
                aggregateKeyType: "IP",
                limit: 10000,
                scopeDownStatement: {
                    geoMatchStatement: {
                        countryCodes: [
                            "US",
                            "NL",
                        ],
                    },
                },
            },
        },
        visibilityConfig: {
            cloudwatchMetricsEnabled: false,
            metricName: "friendly-rule-metric-name",
            sampledRequestsEnabled: false,
        },
    }],
    scope: "CLOUDFRONT",
    tags: {
        Tag1: "Value1",
        Tag2: "Value2",
    },
    visibilityConfig: {
        cloudwatchMetricsEnabled: false,
        metricName: "friendly-metric-name",
        sampledRequestsEnabled: false,
    },
});

    import pulumi
import pulumi_aws as aws

example = aws.wafv2.WebAcl("example",
    default_action=aws.wafv2.WebAclDefaultActionArgs(
        allow=aws.wafv2.WebAclDefaultActionAllowArgs(),
    ),
    description="Example of a Cloudfront rate based statement.",
    rules=[aws.wafv2.WebAclRuleArgs(
        action=aws.wafv2.WebAclRuleActionArgs(
            block=aws.wafv2.WebAclRuleActionBlockArgs(),
        ),
        name="rule-1",
        priority=1,
        statement=aws.wafv2.WebAclRuleStatementArgs(
            rate_based_statement=aws.wafv2.WebAclRuleStatementRateBasedStatementArgs(
                aggregate_key_type="IP",
                limit=10000,
                scope_down_statement=aws.wafv2.WebAclRuleStatementRateBasedStatementScopeDownStatementArgs(
                    geo_match_statement=aws.wafv2.WebAclRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatementArgs(
                        country_codes=[
                            "US",
                            "NL",
                        ],
                    ),
                ),
            ),
        ),
        visibility_config=aws.wafv2.WebAclRuleVisibilityConfigArgs(
            cloudwatch_metrics_enabled=False,
            metric_name="friendly-rule-metric-name",
            sampled_requests_enabled=False,
        ),
    )],
    scope="CLOUDFRONT",
    tags={
        "Tag1": "Value1",
        "Tag2": "Value2",
    },
    visibility_config=aws.wafv2.WebAclVisibilityConfigArgs(
        cloudwatch_metrics_enabled=False,
        metric_name="friendly-metric-name",
        sampled_requests_enabled=False,
    ))

    resources:
  atp-example:
    type: aws:wafv2:WebAcl
    properties:
      defaultAction:
        allow: {}
      description: Example of a managed ATP rule.
      rules:
        - name: atp-rule-1
          overrideAction:
            count: {}
          priority: 1
          statement:
            managedRuleGroupStatement:
              managedRuleGroupConfigs:
                - awsManagedRulesAtpRuleSet:
                    loginPath: /api/1/signin
                    requestInspection:
                      passwordField:
                        identifier: /password
                      payloadType: JSON
                      usernameField:
                        identifier: /email
                    responseInspection:
                      statusCode:
                        failureCodes:
                          - '403'
                        successCodes:
                          - '200'
              name: AWSManagedRulesATPRuleSet
              vendorName: AWS
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: friendly-rule-metric-name
            sampledRequestsEnabled: false
      scope: CLOUDFRONT
      visibilityConfig:
        cloudwatchMetricsEnabled: false
        metricName: friendly-metric-name
        sampledRequestsEnabled: false

    Rate Based

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.WafV2.RuleGroup("example", new()
    {
        Capacity = 10,
        Scope = "REGIONAL",
        Rules = new[]
        {
            new Aws.WafV2.Inputs.RuleGroupRuleArgs
            {
                Name = "rule-1",
                Priority = 1,
                Action = new Aws.WafV2.Inputs.RuleGroupRuleActionArgs
                {
                    Count = null,
                },
                Statement = new Aws.WafV2.Inputs.RuleGroupRuleStatementArgs
                {
                    GeoMatchStatement = new Aws.WafV2.Inputs.RuleGroupRuleStatementGeoMatchStatementArgs
                    {
                        CountryCodes = new[]
                        {
                            "NL",
                        },
                    },
                },
                VisibilityConfig = new Aws.WafV2.Inputs.RuleGroupRuleVisibilityConfigArgs
                {
                    CloudwatchMetricsEnabled = false,
                    MetricName = "friendly-rule-metric-name",
                    SampledRequestsEnabled = false,
                },
            },
            new Aws.WafV2.Inputs.RuleGroupRuleArgs
            {
                Name = "rule-to-exclude-a",
                Priority = 10,
                Action = new Aws.WafV2.Inputs.RuleGroupRuleActionArgs
                {
                    Allow = null,
                },
                Statement = new Aws.WafV2.Inputs.RuleGroupRuleStatementArgs
                {
                    GeoMatchStatement = new Aws.WafV2.Inputs.RuleGroupRuleStatementGeoMatchStatementArgs
                    {
                        CountryCodes = new[]
                        {
                            "US",
                        },
                    },
                },
                VisibilityConfig = new Aws.WafV2.Inputs.RuleGroupRuleVisibilityConfigArgs
                {
                    CloudwatchMetricsEnabled = false,
                    MetricName = "friendly-rule-metric-name",
                    SampledRequestsEnabled = false,
                },
            },
            new Aws.WafV2.Inputs.RuleGroupRuleArgs
            {
                Name = "rule-to-exclude-b",
                Priority = 15,
                Action = new Aws.WafV2.Inputs.RuleGroupRuleActionArgs
                {
                    Allow = null,
                },
                Statement = new Aws.WafV2.Inputs.RuleGroupRuleStatementArgs
                {
                    GeoMatchStatement = new Aws.WafV2.Inputs.RuleGroupRuleStatementGeoMatchStatementArgs
                    {
                        CountryCodes = new[]
                        {
                            "GB",
                        },
                    },
                },
                VisibilityConfig = new Aws.WafV2.Inputs.RuleGroupRuleVisibilityConfigArgs
                {
                    CloudwatchMetricsEnabled = false,
                    MetricName = "friendly-rule-metric-name",
                    SampledRequestsEnabled = false,
                },
            },
        },
        VisibilityConfig = new Aws.WafV2.Inputs.RuleGroupVisibilityConfigArgs
        {
            CloudwatchMetricsEnabled = false,
            MetricName = "friendly-metric-name",
            SampledRequestsEnabled = false,
        },
    });

    var test = new Aws.WafV2.WebAcl("test", new()
    {
        Scope = "REGIONAL",
        DefaultAction = new Aws.WafV2.Inputs.WebAclDefaultActionArgs
        {
            Block = null,
        },
        Rules = new[]
        {
            new Aws.WafV2.Inputs.WebAclRuleArgs
            {
                Name = "rule-1",
                Priority = 1,
                OverrideAction = new Aws.WafV2.Inputs.WebAclRuleOverrideActionArgs
                {
                    Count = null,
                },
                Statement = new Aws.WafV2.Inputs.WebAclRuleStatementArgs
                {
                    RuleGroupReferenceStatement = new Aws.WafV2.Inputs.WebAclRuleStatementRuleGroupReferenceStatementArgs
                    {
                        Arn = example.Arn,
                        ExcludedRules = new[]
                        {
                            new Aws.WafV2.Inputs.WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArgs
                            {
                                Name = "rule-to-exclude-b",
                            },
                            new Aws.WafV2.Inputs.WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArgs
                            {
                                Name = "rule-to-exclude-a",
                            },
                        },
                    },
                },
                VisibilityConfig = new Aws.WafV2.Inputs.WebAclRuleVisibilityConfigArgs
                {
                    CloudwatchMetricsEnabled = false,
                    MetricName = "friendly-rule-metric-name",
                    SampledRequestsEnabled = false,
                },
            },
        },
        Tags = 
        {
            { "Tag1", "Value1" },
            { "Tag2", "Value2" },
        },
        VisibilityConfig = new Aws.WafV2.Inputs.WebAclVisibilityConfigArgs
        {
            CloudwatchMetricsEnabled = false,
            MetricName = "friendly-metric-name",
            SampledRequestsEnabled = false,
        },
    });

});

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/wafv2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := wafv2.NewRuleGroup(ctx, "example", &wafv2.RuleGroupArgs{
			Capacity: pulumi.Int(10),
			Scope:    pulumi.String("REGIONAL"),
			Rules: wafv2.RuleGroupRuleArray{
				&wafv2.RuleGroupRuleArgs{
					Name:     pulumi.String("rule-1"),
					Priority: pulumi.Int(1),
					Action: &wafv2.RuleGroupRuleActionArgs{
						Count: nil,
					},
					Statement: &wafv2.RuleGroupRuleStatementArgs{
						GeoMatchStatement: &wafv2.RuleGroupRuleStatementGeoMatchStatementArgs{
							CountryCodes: pulumi.StringArray{
								pulumi.String("NL"),
							},
						},
					},
					VisibilityConfig: &wafv2.RuleGroupRuleVisibilityConfigArgs{
						CloudwatchMetricsEnabled: pulumi.Bool(false),
						MetricName:               pulumi.String("friendly-rule-metric-name"),
						SampledRequestsEnabled:   pulumi.Bool(false),
					},
				},
				&wafv2.RuleGroupRuleArgs{
					Name:     pulumi.String("rule-to-exclude-a"),
					Priority: pulumi.Int(10),
					Action: &wafv2.RuleGroupRuleActionArgs{
						Allow: nil,
					},
					Statement: &wafv2.RuleGroupRuleStatementArgs{
						GeoMatchStatement: &wafv2.RuleGroupRuleStatementGeoMatchStatementArgs{
							CountryCodes: pulumi.StringArray{
								pulumi.String("US"),
							},
						},
					},
					VisibilityConfig: &wafv2.RuleGroupRuleVisibilityConfigArgs{
						CloudwatchMetricsEnabled: pulumi.Bool(false),
						MetricName:               pulumi.String("friendly-rule-metric-name"),
						SampledRequestsEnabled:   pulumi.Bool(false),
					},
				},
				&wafv2.RuleGroupRuleArgs{
					Name:     pulumi.String("rule-to-exclude-b"),
					Priority: pulumi.Int(15),
					Action: &wafv2.RuleGroupRuleActionArgs{
						Allow: nil,
					},
					Statement: &wafv2.RuleGroupRuleStatementArgs{
						GeoMatchStatement: &wafv2.RuleGroupRuleStatementGeoMatchStatementArgs{
							CountryCodes: pulumi.StringArray{
								pulumi.String("GB"),
							},
						},
					},
					VisibilityConfig: &wafv2.RuleGroupRuleVisibilityConfigArgs{
						CloudwatchMetricsEnabled: pulumi.Bool(false),
						MetricName:               pulumi.String("friendly-rule-metric-name"),
						SampledRequestsEnabled:   pulumi.Bool(false),
					},
				},
			},
			VisibilityConfig: &wafv2.RuleGroupVisibilityConfigArgs{
				CloudwatchMetricsEnabled: pulumi.Bool(false),
				MetricName:               pulumi.String("friendly-metric-name"),
				SampledRequestsEnabled:   pulumi.Bool(false),
			},
		})
		if err != nil {
			return err
		}
		_, err = wafv2.NewWebAcl(ctx, "test", &wafv2.WebAclArgs{
			Scope: pulumi.String("REGIONAL"),
			DefaultAction: &wafv2.WebAclDefaultActionArgs{
				Block: nil,
			},
			Rules: wafv2.WebAclRuleArray{
				&wafv2.WebAclRuleArgs{
					Name:     pulumi.String("rule-1"),
					Priority: pulumi.Int(1),
					OverrideAction: &wafv2.WebAclRuleOverrideActionArgs{
						Count: nil,
					},
					Statement: &wafv2.WebAclRuleStatementArgs{
						RuleGroupReferenceStatement: &wafv2.WebAclRuleStatementRuleGroupReferenceStatementArgs{
							Arn: example.Arn,
							ExcludedRules: wafv2.WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArray{
								&wafv2.WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArgs{
									Name: pulumi.String("rule-to-exclude-b"),
								},
								&wafv2.WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArgs{
									Name: pulumi.String("rule-to-exclude-a"),
								},
							},
						},
					},
					VisibilityConfig: &wafv2.WebAclRuleVisibilityConfigArgs{
						CloudwatchMetricsEnabled: pulumi.Bool(false),
						MetricName:               pulumi.String("friendly-rule-metric-name"),
						SampledRequestsEnabled:   pulumi.Bool(false),
					},
				},
			},
			Tags: pulumi.StringMap{
				"Tag1": pulumi.String("Value1"),
				"Tag2": pulumi.String("Value2"),
			},
			VisibilityConfig: &wafv2.WebAclVisibilityConfigArgs{
				CloudwatchMetricsEnabled: pulumi.Bool(false),
				MetricName:               pulumi.String("friendly-metric-name"),
				SampledRequestsEnabled:   pulumi.Bool(false),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.wafv2.WebAcl;
import com.pulumi.aws.wafv2.WebAclArgs;
import com.pulumi.aws.wafv2.inputs.WebAclDefaultActionArgs;
import com.pulumi.aws.wafv2.inputs.WebAclDefaultActionAllowArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleActionArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleActionBlockArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementRateBasedStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementRateBasedStatementScopeDownStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleVisibilityConfigArgs;
import com.pulumi.aws.wafv2.inputs.WebAclVisibilityConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new WebAcl("example", WebAclArgs.builder()        
            .defaultAction(WebAclDefaultActionArgs.builder()
                .allow()
                .build())
            .description("Example of a Cloudfront rate based statement.")
            .rules(WebAclRuleArgs.builder()
                .action(WebAclRuleActionArgs.builder()
                    .block()
                    .build())
                .name("rule-1")
                .priority(1)
                .statement(WebAclRuleStatementArgs.builder()
                    .rateBasedStatement(WebAclRuleStatementRateBasedStatementArgs.builder()
                        .aggregateKeyType("IP")
                        .limit(10000)
                        .scopeDownStatement(WebAclRuleStatementRateBasedStatementScopeDownStatementArgs.builder()
                            .geoMatchStatement(WebAclRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatementArgs.builder()
                                .countryCodes(                                
                                    "US",
                                    "NL")
                                .build())
                            .build())
                        .build())
                    .build())
                .visibilityConfig(WebAclRuleVisibilityConfigArgs.builder()
                    .cloudwatchMetricsEnabled(false)
                    .metricName("friendly-rule-metric-name")
                    .sampledRequestsEnabled(false)
                    .build())
                .build())
            .scope("CLOUDFRONT")
            .tags(Map.ofEntries(
                Map.entry("Tag1", "Value1"),
                Map.entry("Tag2", "Value2")
            ))
            .visibilityConfig(WebAclVisibilityConfigArgs.builder()
                .cloudwatchMetricsEnabled(false)
                .metricName("friendly-metric-name")
                .sampledRequestsEnabled(false)
                .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.wafv2.RuleGroup("example", {
    capacity: 10,
    scope: "REGIONAL",
    rules: [
        {
            name: "rule-1",
            priority: 1,
            action: {
                count: {},
            },
            statement: {
                geoMatchStatement: {
                    countryCodes: ["NL"],
                },
            },
            visibilityConfig: {
                cloudwatchMetricsEnabled: false,
                metricName: "friendly-rule-metric-name",
                sampledRequestsEnabled: false,
            },
        },
        {
            name: "rule-to-exclude-a",
            priority: 10,
            action: {
                allow: {},
            },
            statement: {
                geoMatchStatement: {
                    countryCodes: ["US"],
                },
            },
            visibilityConfig: {
                cloudwatchMetricsEnabled: false,
                metricName: "friendly-rule-metric-name",
                sampledRequestsEnabled: false,
            },
        },
        {
            name: "rule-to-exclude-b",
            priority: 15,
            action: {
                allow: {},
            },
            statement: {
                geoMatchStatement: {
                    countryCodes: ["GB"],
                },
            },
            visibilityConfig: {
                cloudwatchMetricsEnabled: false,
                metricName: "friendly-rule-metric-name",
                sampledRequestsEnabled: false,
            },
        },
    ],
    visibilityConfig: {
        cloudwatchMetricsEnabled: false,
        metricName: "friendly-metric-name",
        sampledRequestsEnabled: false,
    },
});
const test = new aws.wafv2.WebAcl("test", {
    scope: "REGIONAL",
    defaultAction: {
        block: {},
    },
    rules: [{
        name: "rule-1",
        priority: 1,
        overrideAction: {
            count: {},
        },
        statement: {
            ruleGroupReferenceStatement: {
                arn: example.arn,
                excludedRules: [
                    {
                        name: "rule-to-exclude-b",
                    },
                    {
                        name: "rule-to-exclude-a",
                    },
                ],
            },
        },
        visibilityConfig: {
            cloudwatchMetricsEnabled: false,
            metricName: "friendly-rule-metric-name",
            sampledRequestsEnabled: false,
        },
    }],
    tags: {
        Tag1: "Value1",
        Tag2: "Value2",
    },
    visibilityConfig: {
        cloudwatchMetricsEnabled: false,
        metricName: "friendly-metric-name",
        sampledRequestsEnabled: false,
    },
});

    import pulumi
import pulumi_aws as aws

example = aws.wafv2.RuleGroup("example",
    capacity=10,
    scope="REGIONAL",
    rules=[
        aws.wafv2.RuleGroupRuleArgs(
            name="rule-1",
            priority=1,
            action=aws.wafv2.RuleGroupRuleActionArgs(
                count=aws.wafv2.RuleGroupRuleActionCountArgs(),
            ),
            statement=aws.wafv2.RuleGroupRuleStatementArgs(
                geo_match_statement=aws.wafv2.RuleGroupRuleStatementGeoMatchStatementArgs(
                    country_codes=["NL"],
                ),
            ),
            visibility_config=aws.wafv2.RuleGroupRuleVisibilityConfigArgs(
                cloudwatch_metrics_enabled=False,
                metric_name="friendly-rule-metric-name",
                sampled_requests_enabled=False,
            ),
        ),
        aws.wafv2.RuleGroupRuleArgs(
            name="rule-to-exclude-a",
            priority=10,
            action=aws.wafv2.RuleGroupRuleActionArgs(
                allow=aws.wafv2.RuleGroupRuleActionAllowArgs(),
            ),
            statement=aws.wafv2.RuleGroupRuleStatementArgs(
                geo_match_statement=aws.wafv2.RuleGroupRuleStatementGeoMatchStatementArgs(
                    country_codes=["US"],
                ),
            ),
            visibility_config=aws.wafv2.RuleGroupRuleVisibilityConfigArgs(
                cloudwatch_metrics_enabled=False,
                metric_name="friendly-rule-metric-name",
                sampled_requests_enabled=False,
            ),
        ),
        aws.wafv2.RuleGroupRuleArgs(
            name="rule-to-exclude-b",
            priority=15,
            action=aws.wafv2.RuleGroupRuleActionArgs(
                allow=aws.wafv2.RuleGroupRuleActionAllowArgs(),
            ),
            statement=aws.wafv2.RuleGroupRuleStatementArgs(
                geo_match_statement=aws.wafv2.RuleGroupRuleStatementGeoMatchStatementArgs(
                    country_codes=["GB"],
                ),
            ),
            visibility_config=aws.wafv2.RuleGroupRuleVisibilityConfigArgs(
                cloudwatch_metrics_enabled=False,
                metric_name="friendly-rule-metric-name",
                sampled_requests_enabled=False,
            ),
        ),
    ],
    visibility_config=aws.wafv2.RuleGroupVisibilityConfigArgs(
        cloudwatch_metrics_enabled=False,
        metric_name="friendly-metric-name",
        sampled_requests_enabled=False,
    ))
test = aws.wafv2.WebAcl("test",
    scope="REGIONAL",
    default_action=aws.wafv2.WebAclDefaultActionArgs(
        block=aws.wafv2.WebAclDefaultActionBlockArgs(),
    ),
    rules=[aws.wafv2.WebAclRuleArgs(
        name="rule-1",
        priority=1,
        override_action=aws.wafv2.WebAclRuleOverrideActionArgs(
            count=aws.wafv2.WebAclRuleOverrideActionCountArgs(),
        ),
        statement=aws.wafv2.WebAclRuleStatementArgs(
            rule_group_reference_statement=aws.wafv2.WebAclRuleStatementRuleGroupReferenceStatementArgs(
                arn=example.arn,
                excluded_rules=[
                    aws.wafv2.WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArgs(
                        name="rule-to-exclude-b",
                    ),
                    aws.wafv2.WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArgs(
                        name="rule-to-exclude-a",
                    ),
                ],
            ),
        ),
        visibility_config=aws.wafv2.WebAclRuleVisibilityConfigArgs(
            cloudwatch_metrics_enabled=False,
            metric_name="friendly-rule-metric-name",
            sampled_requests_enabled=False,
        ),
    )],
    tags={
        "Tag1": "Value1",
        "Tag2": "Value2",
    },
    visibility_config=aws.wafv2.WebAclVisibilityConfigArgs(
        cloudwatch_metrics_enabled=False,
        metric_name="friendly-metric-name",
        sampled_requests_enabled=False,
    ))

    resources:
  example:
    type: aws:wafv2:WebAcl
    properties:
      defaultAction:
        allow: {}
      description: Example of a Cloudfront rate based statement.
      rules:
        - action:
            block: {}
          name: rule-1
          priority: 1
          statement:
            rateBasedStatement:
              aggregateKeyType: IP
              limit: 10000
              scopeDownStatement:
                geoMatchStatement:
                  countryCodes:
                    - US
                    - NL
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: friendly-rule-metric-name
            sampledRequestsEnabled: false
      scope: CLOUDFRONT
      tags:
        Tag1: Value1
        Tag2: Value2
      visibilityConfig:
        cloudwatchMetricsEnabled: false
        metricName: friendly-metric-name
        sampledRequestsEnabled: false

    Rule Group Reference

    Example coming soon!

    Example coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.wafv2.RuleGroup;
import com.pulumi.aws.wafv2.RuleGroupArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleActionArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleActionCountArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleStatementGeoMatchStatementArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleVisibilityConfigArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupRuleActionAllowArgs;
import com.pulumi.aws.wafv2.inputs.RuleGroupVisibilityConfigArgs;
import com.pulumi.aws.wafv2.WebAcl;
import com.pulumi.aws.wafv2.WebAclArgs;
import com.pulumi.aws.wafv2.inputs.WebAclDefaultActionArgs;
import com.pulumi.aws.wafv2.inputs.WebAclDefaultActionBlockArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleOverrideActionArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleOverrideActionCountArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleStatementRuleGroupReferenceStatementArgs;
import com.pulumi.aws.wafv2.inputs.WebAclRuleVisibilityConfigArgs;
import com.pulumi.aws.wafv2.inputs.WebAclVisibilityConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new RuleGroup("example", RuleGroupArgs.builder()        
            .capacity(10)
            .scope("REGIONAL")
            .rules(            
                RuleGroupRuleArgs.builder()
                    .name("rule-1")
                    .priority(1)
                    .action(RuleGroupRuleActionArgs.builder()
                        .count()
                        .build())
                    .statement(RuleGroupRuleStatementArgs.builder()
                        .geoMatchStatement(RuleGroupRuleStatementGeoMatchStatementArgs.builder()
                            .countryCodes("NL")
                            .build())
                        .build())
                    .visibilityConfig(RuleGroupRuleVisibilityConfigArgs.builder()
                        .cloudwatchMetricsEnabled(false)
                        .metricName("friendly-rule-metric-name")
                        .sampledRequestsEnabled(false)
                        .build())
                    .build(),
                RuleGroupRuleArgs.builder()
                    .name("rule-to-exclude-a")
                    .priority(10)
                    .action(RuleGroupRuleActionArgs.builder()
                        .allow()
                        .build())
                    .statement(RuleGroupRuleStatementArgs.builder()
                        .geoMatchStatement(RuleGroupRuleStatementGeoMatchStatementArgs.builder()
                            .countryCodes("US")
                            .build())
                        .build())
                    .visibilityConfig(RuleGroupRuleVisibilityConfigArgs.builder()
                        .cloudwatchMetricsEnabled(false)
                        .metricName("friendly-rule-metric-name")
                        .sampledRequestsEnabled(false)
                        .build())
                    .build(),
                RuleGroupRuleArgs.builder()
                    .name("rule-to-exclude-b")
                    .priority(15)
                    .action(RuleGroupRuleActionArgs.builder()
                        .allow()
                        .build())
                    .statement(RuleGroupRuleStatementArgs.builder()
                        .geoMatchStatement(RuleGroupRuleStatementGeoMatchStatementArgs.builder()
                            .countryCodes("GB")
                            .build())
                        .build())
                    .visibilityConfig(RuleGroupRuleVisibilityConfigArgs.builder()
                        .cloudwatchMetricsEnabled(false)
                        .metricName("friendly-rule-metric-name")
                        .sampledRequestsEnabled(false)
                        .build())
                    .build())
            .visibilityConfig(RuleGroupVisibilityConfigArgs.builder()
                .cloudwatchMetricsEnabled(false)
                .metricName("friendly-metric-name")
                .sampledRequestsEnabled(false)
                .build())
            .build());

        var test = new WebAcl("test", WebAclArgs.builder()        
            .scope("REGIONAL")
            .defaultAction(WebAclDefaultActionArgs.builder()
                .block()
                .build())
            .rules(WebAclRuleArgs.builder()
                .name("rule-1")
                .priority(1)
                .overrideAction(WebAclRuleOverrideActionArgs.builder()
                    .count()
                    .build())
                .statement(WebAclRuleStatementArgs.builder()
                    .ruleGroupReferenceStatement(WebAclRuleStatementRuleGroupReferenceStatementArgs.builder()
                        .arn(example.arn())
                        .excludedRules(                        
                            WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArgs.builder()
                                .name("rule-to-exclude-b")
                                .build(),
                            WebAclRuleStatementRuleGroupReferenceStatementExcludedRuleArgs.builder()
                                .name("rule-to-exclude-a")
                                .build())
                        .build())
                    .build())
                .visibilityConfig(WebAclRuleVisibilityConfigArgs.builder()
                    .cloudwatchMetricsEnabled(false)
                    .metricName("friendly-rule-metric-name")
                    .sampledRequestsEnabled(false)
                    .build())
                .build())
            .tags(Map.ofEntries(
                Map.entry("Tag1", "Value1"),
                Map.entry("Tag2", "Value2")
            ))
            .visibilityConfig(WebAclVisibilityConfigArgs.builder()
                .cloudwatchMetricsEnabled(false)
                .metricName("friendly-metric-name")
                .sampledRequestsEnabled(false)
                .build())
            .build());

    }
}

    Example coming soon!

    Example coming soon!

    resources:
  example:
    type: aws:wafv2:RuleGroup
    properties:
      capacity: 10
      scope: REGIONAL
      rules:
        - name: rule-1
          priority: 1
          action:
            count: {}
          statement:
            geoMatchStatement:
              countryCodes:
                - NL
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: friendly-rule-metric-name
            sampledRequestsEnabled: false
        - name: rule-to-exclude-a
          priority: 10
          action:
            allow: {}
          statement:
            geoMatchStatement:
              countryCodes:
                - US
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: friendly-rule-metric-name
            sampledRequestsEnabled: false
        - name: rule-to-exclude-b
          priority: 15
          action:
            allow: {}
          statement:
            geoMatchStatement:
              countryCodes:
                - GB
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: friendly-rule-metric-name
            sampledRequestsEnabled: false
      visibilityConfig:
        cloudwatchMetricsEnabled: false
        metricName: friendly-metric-name
        sampledRequestsEnabled: false
  test:
    type: aws:wafv2:WebAcl
    properties:
      scope: REGIONAL
      defaultAction:
        block: {}
      rules:
        - name: rule-1
          priority: 1
          overrideAction:
            count: {}
          statement:
            ruleGroupReferenceStatement:
              arn: ${example.arn}
              excludedRules:
                - name: rule-to-exclude-b
                - name: rule-to-exclude-a
          visibilityConfig:
            cloudwatchMetricsEnabled: false
            metricName: friendly-rule-metric-name
            sampledRequestsEnabled: false
      tags:
        Tag1: Value1
        Tag2: Value2
      visibilityConfig:
        cloudwatchMetricsEnabled: false
        metricName: friendly-metric-name
        sampledRequestsEnabled: false

    Create WebAcl Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new WebAcl(name: string, args: WebAclArgs, opts?: CustomResourceOptions);
    @overload
def WebAcl(resource_name: str,
           args: WebAclArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def WebAcl(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           captcha_config: Optional[WebAclCaptchaConfigArgs] = None,
           custom_response_bodies: Optional[Sequence[WebAclCustomResponseBodyArgs]] = None,
           default_action: Optional[WebAclDefaultActionArgs] = None,
           description: Optional[str] = None,
           name: Optional[str] = None,
           rules: Optional[Sequence[WebAclRuleArgs]] = None,
           scope: Optional[str] = None,
           tags: Optional[Mapping[str, str]] = None,
           token_domains: Optional[Sequence[str]] = None,
           visibility_config: Optional[WebAclVisibilityConfigArgs] = None)
    func NewWebAcl(ctx *Context, name string, args WebAclArgs, opts ...ResourceOption) (*WebAcl, error)
    public WebAcl(string name, WebAclArgs args, CustomResourceOptions? opts = null)
    public WebAcl(String name, WebAclArgs args)
public WebAcl(String name, WebAclArgs args, CustomResourceOptions options)

    type: aws:wafv2:WebAcl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args WebAclArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args WebAclArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args WebAclArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WebAclArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args WebAclArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    WebAcl Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The WebAcl resource accepts the following input properties:

    DefaultAction WebAclDefaultAction
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    Scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    VisibilityConfig WebAclVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    CaptchaConfig WebAclCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    CustomResponseBodies List<WebAclCustomResponseBody>
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    Description string
    Friendly description of the WebACL.
    Name string
    Friendly name of the WebACL.
    Rules List<WebAclRule>
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    Tags Dictionary<string, string>
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TokenDomains List<string>
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    DefaultAction WebAclDefaultActionArgs
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    Scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    VisibilityConfig WebAclVisibilityConfigArgs
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    CaptchaConfig WebAclCaptchaConfigArgs
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    CustomResponseBodies []WebAclCustomResponseBodyArgs
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    Description string
    Friendly description of the WebACL.
    Name string
    Friendly name of the WebACL.
    Rules []WebAclRuleArgs
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    Tags map[string]string
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TokenDomains []string
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    defaultAction WebAclDefaultAction
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    scope String
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    visibilityConfig WebAclVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    captchaConfig WebAclCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    customResponseBodies List<WebAclCustomResponseBody>
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    description String
    Friendly description of the WebACL.
    name String
    Friendly name of the WebACL.
    rules List<WebAclRule>
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    tags Map<String,String>
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tokenDomains List<String>
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    defaultAction WebAclDefaultAction
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    visibilityConfig WebAclVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    captchaConfig WebAclCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    customResponseBodies WebAclCustomResponseBody[]
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    description string
    Friendly description of the WebACL.
    name string
    Friendly name of the WebACL.
    rules WebAclRule[]
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    tags {[key: string]: string}
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tokenDomains string[]
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    default_action WebAclDefaultActionArgs
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    scope str
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    visibility_config WebAclVisibilityConfigArgs
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    captcha_config WebAclCaptchaConfigArgs
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    custom_response_bodies Sequence[WebAclCustomResponseBodyArgs]
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    description str
    Friendly description of the WebACL.
    name str
    Friendly name of the WebACL.
    rules Sequence[WebAclRuleArgs]
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    tags Mapping[str, str]
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    token_domains Sequence[str]
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    defaultAction Property Map
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    scope String
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    visibilityConfig Property Map
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    captchaConfig Property Map
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    customResponseBodies List<Property Map>
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    description String
    Friendly description of the WebACL.
    name String
    Friendly name of the WebACL.
    rules List<Property Map>
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    tags Map<String>
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tokenDomains List<String>
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the WebAcl resource produces the following output properties:

    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    Capacity int
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    Id string
    The provider-assigned unique ID for this managed resource.
    LockToken string
    TagsAll Dictionary<string, string>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    Capacity int
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    Id string
    The provider-assigned unique ID for this managed resource.
    LockToken string
    TagsAll map[string]string
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity Integer
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    id String
    The provider-assigned unique ID for this managed resource.
    lockToken String
    tagsAll Map<String,String>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity number
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    id string
    The provider-assigned unique ID for this managed resource.
    lockToken string
    tagsAll {[key: string]: string}
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity int
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    id str
    The provider-assigned unique ID for this managed resource.
    lock_token str
    tags_all Mapping[str, str]
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity Number
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    id String
    The provider-assigned unique ID for this managed resource.
    lockToken String
    tagsAll Map<String>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    Look up Existing WebAcl Resource

    Get an existing WebAcl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: WebAclState, opts?: CustomResourceOptions): WebAcl
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn: Optional[str] = None,
        capacity: Optional[int] = None,
        captcha_config: Optional[WebAclCaptchaConfigArgs] = None,
        custom_response_bodies: Optional[Sequence[WebAclCustomResponseBodyArgs]] = None,
        default_action: Optional[WebAclDefaultActionArgs] = None,
        description: Optional[str] = None,
        lock_token: Optional[str] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[WebAclRuleArgs]] = None,
        scope: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        token_domains: Optional[Sequence[str]] = None,
        visibility_config: Optional[WebAclVisibilityConfigArgs] = None) -> WebAcl
    func GetWebAcl(ctx *Context, name string, id IDInput, state *WebAclState, opts ...ResourceOption) (*WebAcl, error)
    public static WebAcl Get(string name, Input<string> id, WebAclState? state, CustomResourceOptions? opts = null)
    public static WebAcl get(String name, Output<String> id, WebAclState state, CustomResourceOptions options)
    resources:  _:    type: aws:wafv2:WebAcl    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    Capacity int
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    CaptchaConfig WebAclCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    CustomResponseBodies List<WebAclCustomResponseBody>
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    DefaultAction WebAclDefaultAction
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    Description string
    Friendly description of the WebACL.
    LockToken string
    Name string
    Friendly name of the WebACL.
    Rules List<WebAclRule>
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    Scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    Tags Dictionary<string, string>
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TagsAll Dictionary<string, string>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    TokenDomains List<string>
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    VisibilityConfig WebAclVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    Capacity int
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    CaptchaConfig WebAclCaptchaConfigArgs
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    CustomResponseBodies []WebAclCustomResponseBodyArgs
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    DefaultAction WebAclDefaultActionArgs
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    Description string
    Friendly description of the WebACL.
    LockToken string
    Name string
    Friendly name of the WebACL.
    Rules []WebAclRuleArgs
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    Scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    Tags map[string]string
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TagsAll map[string]string
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    TokenDomains []string
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    VisibilityConfig WebAclVisibilityConfigArgs
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity Integer
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    captchaConfig WebAclCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    customResponseBodies List<WebAclCustomResponseBody>
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    defaultAction WebAclDefaultAction
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    description String
    Friendly description of the WebACL.
    lockToken String
    name String
    Friendly name of the WebACL.
    rules List<WebAclRule>
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    scope String
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    tags Map<String,String>
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll Map<String,String>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    tokenDomains List<String>
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    visibilityConfig WebAclVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity number
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    captchaConfig WebAclCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    customResponseBodies WebAclCustomResponseBody[]
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    defaultAction WebAclDefaultAction
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    description string
    Friendly description of the WebACL.
    lockToken string
    name string
    Friendly name of the WebACL.
    rules WebAclRule[]
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    scope string
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    tags {[key: string]: string}
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll {[key: string]: string}
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    tokenDomains string[]
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    visibilityConfig WebAclVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity int
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    captcha_config WebAclCaptchaConfigArgs
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    custom_response_bodies Sequence[WebAclCustomResponseBodyArgs]
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    default_action WebAclDefaultActionArgs
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    description str
    Friendly description of the WebACL.
    lock_token str
    name str
    Friendly name of the WebACL.
    rules Sequence[WebAclRuleArgs]
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    scope str
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    tags Mapping[str, str]
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tags_all Mapping[str, str]
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    token_domains Sequence[str]
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    visibility_config WebAclVisibilityConfigArgs
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    capacity Number
    Web ACL capacity units (WCUs) currently being used by this web ACL.
    captchaConfig Property Map
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    customResponseBodies List<Property Map>
    Defines custom response bodies that can be referenced by custom_response actions. See custom_response_body below for details.
    defaultAction Property Map
    Action to perform if none of the rules contained in the WebACL match. See default_ action below for details.
    description String
    Friendly description of the WebACL.
    lockToken String
    name String
    Friendly name of the WebACL.
    rules List<Property Map>
    Rule blocks used to identify the web requests that you want to allow, block, or count. See rule below for details.
    scope String
    Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONT or REGIONAL. To work with CloudFront, you must also specify the region us-east-1 (N. Virginia) on the AWS provider.
    tags Map<String>
    Map of key-value pairs to associate with the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll Map<String>
    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
    tokenDomains List<String>
    Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
    visibilityConfig Property Map
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.

    Supporting Types

    Note: There are over 200 nested types for this resource. Only the first 200 types are included in this documentation.

    WebAclCaptchaConfig, WebAclCaptchaConfigArgs

    ImmunityTimeProperty WebAclCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    ImmunityTimeProperty WebAclCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty WebAclCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty WebAclCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunity_time_property WebAclCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty Property Map
    Defines custom immunity time. See Immunity Time Property below for details.

    WebAclCaptchaConfigImmunityTimeProperty, WebAclCaptchaConfigImmunityTimePropertyArgs

    ImmunityTime int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    ImmunityTime int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime Integer
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime number
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunity_time int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime Number
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.

    WebAclCustomResponseBody, WebAclCustomResponseBodyArgs

    Content string
    Payload of the custom response.
    ContentType string
    Type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    Key string
    Unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the custom_response block.
    Content string
    Payload of the custom response.
    ContentType string
    Type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    Key string
    Unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the custom_response block.
    content String
    Payload of the custom response.
    contentType String
    Type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    key String
    Unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the custom_response block.
    content string
    Payload of the custom response.
    contentType string
    Type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    key string
    Unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the custom_response block.
    content str
    Payload of the custom response.
    content_type str
    Type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    key str
    Unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the custom_response block.
    content String
    Payload of the custom response.
    contentType String
    Type of content in the payload that you are defining in the content argument. Valid values are TEXT_PLAIN, TEXT_HTML, or APPLICATION_JSON.
    key String
    Unique key identifying the custom response body. This is referenced by the custom_response_body_key argument in the custom_response block.

    WebAclDefaultAction, WebAclDefaultActionArgs

    Allow WebAclDefaultActionAllow
    Specifies that AWS WAF should allow requests by default. See allow below for details.
    Block WebAclDefaultActionBlock
    Specifies that AWS WAF should block requests by default. See block below for details.
    Allow WebAclDefaultActionAllow
    Specifies that AWS WAF should allow requests by default. See allow below for details.
    Block WebAclDefaultActionBlock
    Specifies that AWS WAF should block requests by default. See block below for details.
    allow WebAclDefaultActionAllow
    Specifies that AWS WAF should allow requests by default. See allow below for details.
    block WebAclDefaultActionBlock
    Specifies that AWS WAF should block requests by default. See block below for details.
    allow WebAclDefaultActionAllow
    Specifies that AWS WAF should allow requests by default. See allow below for details.
    block WebAclDefaultActionBlock
    Specifies that AWS WAF should block requests by default. See block below for details.
    allow WebAclDefaultActionAllow
    Specifies that AWS WAF should allow requests by default. See allow below for details.
    block WebAclDefaultActionBlock
    Specifies that AWS WAF should block requests by default. See block below for details.
    allow Property Map
    Specifies that AWS WAF should allow requests by default. See allow below for details.
    block Property Map
    Specifies that AWS WAF should block requests by default. See block below for details.

    WebAclDefaultActionAllow, WebAclDefaultActionAllowArgs

    CustomRequestHandling WebAclDefaultActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    CustomRequestHandling WebAclDefaultActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclDefaultActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclDefaultActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    custom_request_handling WebAclDefaultActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See custom_request_handling below for details.

    WebAclDefaultActionAllowCustomRequestHandling, WebAclDefaultActionAllowCustomRequestHandlingArgs

    InsertHeaders List<WebAclDefaultActionAllowCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    InsertHeaders []WebAclDefaultActionAllowCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<WebAclDefaultActionAllowCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders WebAclDefaultActionAllowCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insert_headers Sequence[WebAclDefaultActionAllowCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.

    WebAclDefaultActionAllowCustomRequestHandlingInsertHeader, WebAclDefaultActionAllowCustomRequestHandlingInsertHeaderArgs

    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.
    name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value string
    Value of the custom header.
    name str
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value str
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.

    WebAclDefaultActionBlock, WebAclDefaultActionBlockArgs

    CustomResponse WebAclDefaultActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    CustomResponse WebAclDefaultActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    customResponse WebAclDefaultActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    customResponse WebAclDefaultActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    custom_response WebAclDefaultActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    customResponse Property Map
    Defines a custom response for the web request. See custom_response below for details.

    WebAclDefaultActionBlockCustomResponse, WebAclDefaultActionBlockCustomResponseArgs

    ResponseCode int
    The HTTP status code to return to the client.
    CustomResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    ResponseHeaders List<WebAclDefaultActionBlockCustomResponseResponseHeader>
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    ResponseCode int
    The HTTP status code to return to the client.
    CustomResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    ResponseHeaders []WebAclDefaultActionBlockCustomResponseResponseHeader
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    responseCode Integer
    The HTTP status code to return to the client.
    customResponseBodyKey String
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders List<WebAclDefaultActionBlockCustomResponseResponseHeader>
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    responseCode number
    The HTTP status code to return to the client.
    customResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders WebAclDefaultActionBlockCustomResponseResponseHeader[]
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    response_code int
    The HTTP status code to return to the client.
    custom_response_body_key str
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    response_headers Sequence[WebAclDefaultActionBlockCustomResponseResponseHeader]
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    responseCode Number
    The HTTP status code to return to the client.
    customResponseBodyKey String
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders List<Property Map>
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.

    WebAclDefaultActionBlockCustomResponseResponseHeader, WebAclDefaultActionBlockCustomResponseResponseHeaderArgs

    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.
    name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value string
    Value of the custom header.
    name str
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value str
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.

    WebAclRule, WebAclRuleArgs

    Name string
    Friendly name of the rule. NOTE: The provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
    Priority int
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    Statement WebAclRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See statement below for details.
    VisibilityConfig WebAclRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    Action WebAclRuleAction
    Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See action below for details.
    CaptchaConfig WebAclRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    OverrideAction WebAclRuleOverrideAction
    Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statement and managed_rule_group_statement. See override_action below for details.
    RuleLabels List<WebAclRuleRuleLabel>
    Labels to apply to web requests that match the rule match statement. See rule_label below for details.
    Name string
    Friendly name of the rule. NOTE: The provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
    Priority int
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    Statement WebAclRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See statement below for details.
    VisibilityConfig WebAclRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    Action WebAclRuleAction
    Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See action below for details.
    CaptchaConfig WebAclRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    OverrideAction WebAclRuleOverrideAction
    Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statement and managed_rule_group_statement. See override_action below for details.
    RuleLabels []WebAclRuleRuleLabel
    Labels to apply to web requests that match the rule match statement. See rule_label below for details.
    name String
    Friendly name of the rule. NOTE: The provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
    priority Integer
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    statement WebAclRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See statement below for details.
    visibilityConfig WebAclRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    action WebAclRuleAction
    Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See action below for details.
    captchaConfig WebAclRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    overrideAction WebAclRuleOverrideAction
    Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statement and managed_rule_group_statement. See override_action below for details.
    ruleLabels List<WebAclRuleRuleLabel>
    Labels to apply to web requests that match the rule match statement. See rule_label below for details.
    name string
    Friendly name of the rule. NOTE: The provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
    priority number
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    statement WebAclRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See statement below for details.
    visibilityConfig WebAclRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    action WebAclRuleAction
    Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See action below for details.
    captchaConfig WebAclRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    overrideAction WebAclRuleOverrideAction
    Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statement and managed_rule_group_statement. See override_action below for details.
    ruleLabels WebAclRuleRuleLabel[]
    Labels to apply to web requests that match the rule match statement. See rule_label below for details.
    name str
    Friendly name of the rule. NOTE: The provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
    priority int
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    statement WebAclRuleStatement
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See statement below for details.
    visibility_config WebAclRuleVisibilityConfig
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    action WebAclRuleAction
    Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See action below for details.
    captcha_config WebAclRuleCaptchaConfig
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    override_action WebAclRuleOverrideAction
    Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statement and managed_rule_group_statement. See override_action below for details.
    rule_labels Sequence[WebAclRuleRuleLabel]
    Labels to apply to web requests that match the rule match statement. See rule_label below for details.
    name String
    Friendly name of the rule. NOTE: The provider assumes that rules with names matching this pattern, ^ShieldMitigationRuleGroup_<account-id>_<web-acl-guid>_.*, are AWS-added for automatic application layer DDoS mitigation activities. Such rules will be ignored by the provider unless you explicitly include them in your configuration (for example, by using the AWS CLI to discover their properties and creating matching configuration). However, since these rules are owned and managed by AWS, you may get permission errors.
    priority Number
    If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rules in order based on the value of priority. AWS WAF processes rules with lower priority first.
    statement Property Map
    The AWS WAF processing statement for the rule, for example byte_match_statement or geo_match_statement. See statement below for details.
    visibilityConfig Property Map
    Defines and enables Amazon CloudWatch metrics and web request sample collection. See visibility_config below for details.
    action Property Map
    Action that AWS WAF should take on a web request when it matches the rule's statement. This is used only for rules whose statements do not reference a rule group. See action below for details.
    captchaConfig Property Map
    Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
    overrideAction Property Map
    Override action to apply to the rules in a rule group. Used only for rule statements that reference a rule group, like rule_group_reference_statement and managed_rule_group_statement. See override_action below for details.
    ruleLabels List<Property Map>
    Labels to apply to web requests that match the rule match statement. See rule_label below for details.

    WebAclRuleAction, WebAclRuleActionArgs

    Allow WebAclRuleActionAllow
    Instructs AWS WAF to allow the web request. See allow below for details.
    Block WebAclRuleActionBlock
    Instructs AWS WAF to block the web request. See block below for details.
    Captcha WebAclRuleActionCaptcha
    Instructs AWS WAF to run a Captcha check against the web request. See captcha below for details.
    Challenge WebAclRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challenge below for details.
    Count WebAclRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See count below for details.
    Allow WebAclRuleActionAllow
    Instructs AWS WAF to allow the web request. See allow below for details.
    Block WebAclRuleActionBlock
    Instructs AWS WAF to block the web request. See block below for details.
    Captcha WebAclRuleActionCaptcha
    Instructs AWS WAF to run a Captcha check against the web request. See captcha below for details.
    Challenge WebAclRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challenge below for details.
    Count WebAclRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See count below for details.
    allow WebAclRuleActionAllow
    Instructs AWS WAF to allow the web request. See allow below for details.
    block WebAclRuleActionBlock
    Instructs AWS WAF to block the web request. See block below for details.
    captcha WebAclRuleActionCaptcha
    Instructs AWS WAF to run a Captcha check against the web request. See captcha below for details.
    challenge WebAclRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challenge below for details.
    count WebAclRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See count below for details.
    allow WebAclRuleActionAllow
    Instructs AWS WAF to allow the web request. See allow below for details.
    block WebAclRuleActionBlock
    Instructs AWS WAF to block the web request. See block below for details.
    captcha WebAclRuleActionCaptcha
    Instructs AWS WAF to run a Captcha check against the web request. See captcha below for details.
    challenge WebAclRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challenge below for details.
    count WebAclRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See count below for details.
    allow WebAclRuleActionAllow
    Instructs AWS WAF to allow the web request. See allow below for details.
    block WebAclRuleActionBlock
    Instructs AWS WAF to block the web request. See block below for details.
    captcha WebAclRuleActionCaptcha
    Instructs AWS WAF to run a Captcha check against the web request. See captcha below for details.
    challenge WebAclRuleActionChallenge
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challenge below for details.
    count WebAclRuleActionCount
    Instructs AWS WAF to count the web request and allow it. See count below for details.
    allow Property Map
    Instructs AWS WAF to allow the web request. See allow below for details.
    block Property Map
    Instructs AWS WAF to block the web request. See block below for details.
    captcha Property Map
    Instructs AWS WAF to run a Captcha check against the web request. See captcha below for details.
    challenge Property Map
    Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See challenge below for details.
    count Property Map
    Instructs AWS WAF to count the web request and allow it. See count below for details.

    WebAclRuleActionAllow, WebAclRuleActionAllowArgs

    CustomRequestHandling WebAclRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    CustomRequestHandling WebAclRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    custom_request_handling WebAclRuleActionAllowCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See custom_request_handling below for details.

    WebAclRuleActionAllowCustomRequestHandling, WebAclRuleActionAllowCustomRequestHandlingArgs

    InsertHeaders List<WebAclRuleActionAllowCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    InsertHeaders []WebAclRuleActionAllowCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<WebAclRuleActionAllowCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders WebAclRuleActionAllowCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insert_headers Sequence[WebAclRuleActionAllowCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.

    WebAclRuleActionAllowCustomRequestHandlingInsertHeader, WebAclRuleActionAllowCustomRequestHandlingInsertHeaderArgs

    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.
    name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value string
    Value of the custom header.
    name str
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value str
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.

    WebAclRuleActionBlock, WebAclRuleActionBlockArgs

    CustomResponse WebAclRuleActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    CustomResponse WebAclRuleActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    customResponse WebAclRuleActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    customResponse WebAclRuleActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    custom_response WebAclRuleActionBlockCustomResponse
    Defines a custom response for the web request. See custom_response below for details.
    customResponse Property Map
    Defines a custom response for the web request. See custom_response below for details.

    WebAclRuleActionBlockCustomResponse, WebAclRuleActionBlockCustomResponseArgs

    ResponseCode int
    The HTTP status code to return to the client.
    CustomResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    ResponseHeaders List<WebAclRuleActionBlockCustomResponseResponseHeader>
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    ResponseCode int
    The HTTP status code to return to the client.
    CustomResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    ResponseHeaders []WebAclRuleActionBlockCustomResponseResponseHeader
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    responseCode Integer
    The HTTP status code to return to the client.
    customResponseBodyKey String
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders List<WebAclRuleActionBlockCustomResponseResponseHeader>
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    responseCode number
    The HTTP status code to return to the client.
    customResponseBodyKey string
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders WebAclRuleActionBlockCustomResponseResponseHeader[]
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    response_code int
    The HTTP status code to return to the client.
    custom_response_body_key str
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    response_headers Sequence[WebAclRuleActionBlockCustomResponseResponseHeader]
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.
    responseCode Number
    The HTTP status code to return to the client.
    customResponseBodyKey String
    References the response body that you want AWS WAF to return to the web request client. This must reference a key defined in a custom_response_body block of this resource.
    responseHeaders List<Property Map>
    The response_header blocks used to define the HTTP response headers added to the response. See response_header below for details.

    WebAclRuleActionBlockCustomResponseResponseHeader, WebAclRuleActionBlockCustomResponseResponseHeaderArgs

    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.
    name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value string
    Value of the custom header.
    name str
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value str
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.

    WebAclRuleActionCaptcha, WebAclRuleActionCaptchaArgs

    CustomRequestHandling WebAclRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    CustomRequestHandling WebAclRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    custom_request_handling WebAclRuleActionCaptchaCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See custom_request_handling below for details.

    WebAclRuleActionCaptchaCustomRequestHandling, WebAclRuleActionCaptchaCustomRequestHandlingArgs

    InsertHeaders List<WebAclRuleActionCaptchaCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    InsertHeaders []WebAclRuleActionCaptchaCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<WebAclRuleActionCaptchaCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders WebAclRuleActionCaptchaCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insert_headers Sequence[WebAclRuleActionCaptchaCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.

    WebAclRuleActionCaptchaCustomRequestHandlingInsertHeader, WebAclRuleActionCaptchaCustomRequestHandlingInsertHeaderArgs

    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.
    name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value string
    Value of the custom header.
    name str
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value str
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.

    WebAclRuleActionChallenge, WebAclRuleActionChallengeArgs

    CustomRequestHandling WebAclRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    CustomRequestHandling WebAclRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    custom_request_handling WebAclRuleActionChallengeCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See custom_request_handling below for details.

    WebAclRuleActionChallengeCustomRequestHandling, WebAclRuleActionChallengeCustomRequestHandlingArgs

    InsertHeaders List<WebAclRuleActionChallengeCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    InsertHeaders []WebAclRuleActionChallengeCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<WebAclRuleActionChallengeCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders WebAclRuleActionChallengeCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insert_headers Sequence[WebAclRuleActionChallengeCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.

    WebAclRuleActionChallengeCustomRequestHandlingInsertHeader, WebAclRuleActionChallengeCustomRequestHandlingInsertHeaderArgs

    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.
    name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value string
    Value of the custom header.
    name str
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value str
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.

    WebAclRuleActionCount, WebAclRuleActionCountArgs

    CustomRequestHandling WebAclRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    CustomRequestHandling WebAclRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling WebAclRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    custom_request_handling WebAclRuleActionCountCustomRequestHandling
    Defines custom handling for the web request. See custom_request_handling below for details.
    customRequestHandling Property Map
    Defines custom handling for the web request. See custom_request_handling below for details.

    WebAclRuleActionCountCustomRequestHandling, WebAclRuleActionCountCustomRequestHandlingArgs

    InsertHeaders List<WebAclRuleActionCountCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    InsertHeaders []WebAclRuleActionCountCustomRequestHandlingInsertHeader
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<WebAclRuleActionCountCustomRequestHandlingInsertHeader>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders WebAclRuleActionCountCustomRequestHandlingInsertHeader[]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insert_headers Sequence[WebAclRuleActionCountCustomRequestHandlingInsertHeader]
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.
    insertHeaders List<Property Map>
    The insert_header blocks used to define HTTP headers added to the request. See insert_header below for details.

    WebAclRuleActionCountCustomRequestHandlingInsertHeader, WebAclRuleActionCountCustomRequestHandlingInsertHeaderArgs

    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    Name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    Value string
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.
    name string
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value string
    Value of the custom header.
    name str
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value str
    Value of the custom header.
    name String
    Name of the custom header. For custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name x-amzn-waf-, to avoid confusion with the headers that are already in the request. For example, for the header name sample, AWS WAF inserts the header x-amzn-waf-sample.
    value String
    Value of the custom header.

    WebAclRuleCaptchaConfig, WebAclRuleCaptchaConfigArgs

    ImmunityTimeProperty WebAclRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    ImmunityTimeProperty WebAclRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty WebAclRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty WebAclRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunity_time_property WebAclRuleCaptchaConfigImmunityTimeProperty
    Defines custom immunity time. See Immunity Time Property below for details.
    immunityTimeProperty Property Map
    Defines custom immunity time. See Immunity Time Property below for details.

    WebAclRuleCaptchaConfigImmunityTimeProperty, WebAclRuleCaptchaConfigImmunityTimePropertyArgs

    ImmunityTime int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    ImmunityTime int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime Integer
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime number
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunity_time int
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
    immunityTime Number
    The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.

    WebAclRuleOverrideAction, WebAclRuleOverrideActionArgs

    Count WebAclRuleOverrideActionCount
    Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
    None WebAclRuleOverrideActionNone
    Don't override the rule action setting. Configured as an empty block {}.
    Count WebAclRuleOverrideActionCount
    Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
    None WebAclRuleOverrideActionNone
    Don't override the rule action setting. Configured as an empty block {}.
    count WebAclRuleOverrideActionCount
    Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
    none WebAclRuleOverrideActionNone
    Don't override the rule action setting. Configured as an empty block {}.
    count WebAclRuleOverrideActionCount
    Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
    none WebAclRuleOverrideActionNone
    Don't override the rule action setting. Configured as an empty block {}.
    count WebAclRuleOverrideActionCount
    Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
    none WebAclRuleOverrideActionNone
    Don't override the rule action setting. Configured as an empty block {}.
    count Property Map
    Override the rule action setting to count (i.e., only count matches). Configured as an empty block {}.
    none Property Map
    Don't override the rule action setting. Configured as an empty block {}.

    WebAclRuleRuleLabel, WebAclRuleRuleLabelArgs

    Name string
    Label string.
    Name string
    Label string.
    name String
    Label string.
    name string
    Label string.
    name str
    Label string.
    name String
    Label string.

    WebAclRuleStatement, WebAclRuleStatementArgs

    AndStatement WebAclRuleStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    ByteMatchStatement WebAclRuleStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    ManagedRuleGroupStatement WebAclRuleStatementManagedRuleGroupStatement
    Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See Managed Rule Group Statement below for details.
    NotStatement WebAclRuleStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    OrStatement WebAclRuleStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    RateBasedStatement WebAclRuleStatementRateBasedStatement
    Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See rate_based_statement below for details.
    RegexMatchStatement WebAclRuleStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    RuleGroupReferenceStatement WebAclRuleStatementRuleGroupReferenceStatement
    Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See Rule Group Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    AndStatement WebAclRuleStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    ByteMatchStatement WebAclRuleStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    ManagedRuleGroupStatement WebAclRuleStatementManagedRuleGroupStatement
    Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See Managed Rule Group Statement below for details.
    NotStatement WebAclRuleStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    OrStatement WebAclRuleStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    RateBasedStatement WebAclRuleStatementRateBasedStatement
    Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See rate_based_statement below for details.
    RegexMatchStatement WebAclRuleStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    RuleGroupReferenceStatement WebAclRuleStatementRuleGroupReferenceStatement
    Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See Rule Group Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement WebAclRuleStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement WebAclRuleStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    managedRuleGroupStatement WebAclRuleStatementManagedRuleGroupStatement
    Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See Managed Rule Group Statement below for details.
    notStatement WebAclRuleStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement WebAclRuleStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    rateBasedStatement WebAclRuleStatementRateBasedStatement
    Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See rate_based_statement below for details.
    regexMatchStatement WebAclRuleStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    ruleGroupReferenceStatement WebAclRuleStatementRuleGroupReferenceStatement
    Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See Rule Group Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement WebAclRuleStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement WebAclRuleStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    managedRuleGroupStatement WebAclRuleStatementManagedRuleGroupStatement
    Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See Managed Rule Group Statement below for details.
    notStatement WebAclRuleStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement WebAclRuleStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    rateBasedStatement WebAclRuleStatementRateBasedStatement
    Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See rate_based_statement below for details.
    regexMatchStatement WebAclRuleStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    ruleGroupReferenceStatement WebAclRuleStatementRuleGroupReferenceStatement
    Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See Rule Group Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    and_statement WebAclRuleStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byte_match_statement WebAclRuleStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geo_match_statement WebAclRuleStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ip_set_reference_statement WebAclRuleStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement WebAclRuleStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    managed_rule_group_statement WebAclRuleStatementManagedRuleGroupStatement
    Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See Managed Rule Group Statement below for details.
    not_statement WebAclRuleStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    or_statement WebAclRuleStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    rate_based_statement WebAclRuleStatementRateBasedStatement
    Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See rate_based_statement below for details.
    regex_match_statement WebAclRuleStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regex_pattern_set_reference_statement WebAclRuleStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    rule_group_reference_statement WebAclRuleStatementRuleGroupReferenceStatement
    Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See Rule Group Reference Statement below for details.
    size_constraint_statement WebAclRuleStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqli_match_statement WebAclRuleStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xss_match_statement WebAclRuleStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement Property Map
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement Property Map
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement Property Map
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement Property Map
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    managedRuleGroupStatement Property Map
    Rule statement used to run the rules that are defined in a managed rule group. This statement can not be nested. See Managed Rule Group Statement below for details.
    notStatement Property Map
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement Property Map
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    rateBasedStatement Property Map
    Rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span. This statement can not be nested. See rate_based_statement below for details.
    regexMatchStatement Property Map
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement Property Map
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    ruleGroupReferenceStatement Property Map
    Rule statement used to run the rules that are defined in an WAFv2 Rule Group. See Rule Group Reference Statement below for details.
    sizeConstraintStatement Property Map
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement Property Map
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.

    WebAclRuleStatementAndStatement, WebAclRuleStatementAndStatementArgs

    Statements List<WebAclRuleStatementAndStatementStatement>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    Statements []WebAclRuleStatementAndStatementStatement
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements List<WebAclRuleStatementAndStatementStatement>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements WebAclRuleStatementAndStatementStatement[]
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements Sequence[WebAclRuleStatementAndStatementStatement]
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements List<Property Map>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.

    WebAclRuleStatementAndStatementStatement, WebAclRuleStatementAndStatementStatementArgs

    AndStatement WebAclRuleStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    ByteMatchStatement WebAclRuleStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    NotStatement WebAclRuleStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    OrStatement WebAclRuleStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    RegexMatchStatement WebAclRuleStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    AndStatement WebAclRuleStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    ByteMatchStatement WebAclRuleStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    NotStatement WebAclRuleStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    OrStatement WebAclRuleStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    RegexMatchStatement WebAclRuleStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement WebAclRuleStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement WebAclRuleStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    notStatement WebAclRuleStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement WebAclRuleStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    regexMatchStatement WebAclRuleStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement WebAclRuleStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement WebAclRuleStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    notStatement WebAclRuleStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement WebAclRuleStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    regexMatchStatement WebAclRuleStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    and_statement WebAclRuleStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byte_match_statement WebAclRuleStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geo_match_statement WebAclRuleStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ip_set_reference_statement WebAclRuleStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement WebAclRuleStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    not_statement WebAclRuleStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    or_statement WebAclRuleStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    regex_match_statement WebAclRuleStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regex_pattern_set_reference_statement WebAclRuleStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    size_constraint_statement WebAclRuleStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqli_match_statement WebAclRuleStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xss_match_statement WebAclRuleStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement Property Map
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement Property Map
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement Property Map
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement Property Map
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    notStatement Property Map
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement Property Map
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    regexMatchStatement Property Map
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement Property Map
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement Property Map
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement Property Map
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.

    WebAclRuleStatementAndStatementStatementAndStatement, WebAclRuleStatementAndStatementStatementAndStatementArgs

    Statements List<WebAclRuleStatementAndStatementStatementAndStatementStatement>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    Statements []WebAclRuleStatementAndStatementStatementAndStatementStatement
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements List<WebAclRuleStatementAndStatementStatementAndStatementStatement>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements WebAclRuleStatementAndStatementStatementAndStatementStatement[]
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatement]
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements List<Property Map>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementArgs

    AndStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    ByteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    NotStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    OrStatement WebAclRuleStatementAndStatementStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    RegexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    AndStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    ByteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    NotStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    OrStatement WebAclRuleStatementAndStatementStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    RegexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    notStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement WebAclRuleStatementAndStatementStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    regexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    notStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement WebAclRuleStatementAndStatementStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    regexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    and_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatement
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byte_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geo_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ip_set_reference_statement WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    not_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatement
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    or_statement WebAclRuleStatementAndStatementStatementAndStatementStatementOrStatement
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    regex_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regex_pattern_set_reference_statement WebAclRuleStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    size_constraint_statement WebAclRuleStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqli_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xss_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    andStatement Property Map
    Logical rule statement used to combine other rule statements with AND logic. See and_statement below for details.
    byteMatchStatement Property Map
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement Property Map
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement Property Map
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    notStatement Property Map
    Logical rule statement used to negate the results of another rule statement. See not_statement below for details.
    orStatement Property Map
    Logical rule statement used to combine other rule statements with OR logic. See or_statement below for details.
    regexMatchStatement Property Map
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement Property Map
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement Property Map
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement Property Map
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementArgs

    Statements List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatement>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    Statements []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatement
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatement>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatement[]
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatement]
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.
    statements List<Property Map>
    Statements to combine with AND logic. You can use any statements that can be nested. See statement above for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementArgs

    ByteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    RegexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    ByteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    RegexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    byteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    regexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    byteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    regexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    byte_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geo_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ip_set_reference_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    regex_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regex_pattern_set_reference_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    size_constraint_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqli_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xss_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    byteMatchStatement Property Map
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement Property Map
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement Property Map
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    regexMatchStatement Property Map
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement Property Map
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement Property Map
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement Property Map
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementArgs

    PositionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    PositionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint String
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positional_constraint str
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    search_string str
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint String
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatementArgs

    CountryCodes List<string>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    CountryCodes []string
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes List<String>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes string[]
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    country_codes Sequence[str]
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwarded_ip_config WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes List<String>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig Property Map
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfigArgs

    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    fallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    Name of the HTTP header to use for the IP address.
    fallback_behavior str
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    Name of the HTTP header to use for the IP address.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ip_set_forwarded_ip_config WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig Property Map
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs

    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    Position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    Position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    position String
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    Name of the HTTP header to use for the IP address.
    position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallback_behavior str
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    Name of the HTTP header to use for the IP address.
    position str
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    position String
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementLabelMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementLabelMatchStatementArgs

    Key string
    String to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    Key string
    String to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    String to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key string
    String to match against.
    scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key str
    String to match against.
    scope str
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    String to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementArgs

    RegexString string
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    RegexString string
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    regexString String
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    regexString string
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    regex_string str
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    regexString String
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexMatchStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    Arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    arn String
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    arn str
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    arn String
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementRegexPatternSetReferenceStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementArgs

    ComparisonOperator string
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    Size int
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    ComparisonOperator string
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    Size int
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    comparisonOperator String
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size Integer
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    comparisonOperator string
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size number
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    comparison_operator str
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size int
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    comparisonOperator String
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size Number
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSizeConstraintStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementArgs

    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementSqliMatchStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementArgs

    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementAndStatementStatementXssMatchStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementArgs

    PositionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    PositionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint String
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positional_constraint str
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    search_string str
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint String
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementByteMatchStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementArgs

    CountryCodes List<string>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    CountryCodes []string
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes List<String>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes string[]
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    country_codes Sequence[str]
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwarded_ip_config WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes List<String>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig Property Map
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfig, WebAclRuleStatementAndStatementStatementAndStatementStatementGeoMatchStatementForwardedIpConfigArgs

    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    fallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    Name of the HTTP header to use for the IP address.
    fallback_behavior str
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    Name of the HTTP header to use for the IP address.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.

    WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ip_set_forwarded_ip_config WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig Property Map
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig, WebAclRuleStatementAndStatementStatementAndStatementStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs

    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    Position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    Position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    position String
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    Name of the HTTP header to use for the IP address.
    position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallback_behavior str
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    Name of the HTTP header to use for the IP address.
    position str
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    position String
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.

    WebAclRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementLabelMatchStatementArgs

    Key string
    String to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    Key string
    String to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    String to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key string
    String to match against.
    scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key str
    String to match against.
    scope str
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    String to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementArgs

    Statements List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatement>
    Statement to negate. You can use any statement that can be nested. See statement above for details.
    Statements []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatement
    Statement to negate. You can use any statement that can be nested. See statement above for details.
    statements List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatement>
    Statement to negate. You can use any statement that can be nested. See statement above for details.
    statements WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatement[]
    Statement to negate. You can use any statement that can be nested. See statement above for details.
    statements Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatement]
    Statement to negate. You can use any statement that can be nested. See statement above for details.
    statements List<Property Map>
    Statement to negate. You can use any statement that can be nested. See statement above for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementArgs

    ByteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    RegexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    ByteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    GeoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    IpSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    LabelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    RegexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    RegexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    SizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    SqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    XssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    byteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    regexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    byteMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    regexMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    byte_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatement
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geo_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatement
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ip_set_reference_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    label_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementLabelMatchStatement
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    regex_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatement
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regex_pattern_set_reference_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    size_constraint_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatement
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqli_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatement
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xss_match_statement WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatement
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.
    byteMatchStatement Property Map
    Rule statement that defines a string match search for AWS WAF to apply to web requests. See byte_match_statement below for details.
    geoMatchStatement Property Map
    Rule statement used to identify web requests based on country of origin. See geo_match_statement below for details.
    ipSetReferenceStatement Property Map
    Rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
    labelMatchStatement Property Map
    Rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See label_match_statement below for details.
    regexMatchStatement Property Map
    Rule statement used to search web request components for a match against a single regular expression. See regex_match_statement below for details.
    regexPatternSetReferenceStatement Property Map
    Rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
    sizeConstraintStatement Property Map
    Rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See size_constraint_statement below for more details.
    sqliMatchStatement Property Map
    An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See sqli_match_statement below for details.
    xssMatchStatement Property Map
    Rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See xss_match_statement below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementArgs

    PositionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    PositionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    SearchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint String
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint string
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString string
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positional_constraint str
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    search_string str
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    positionalConstraint String
    Area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following: EXACTLY, STARTS_WITH, ENDS_WITH, CONTAINS, CONTAINS_WORD. See the AWS documentation for more information.
    searchString String
    String value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementByteMatchStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatementArgs

    CountryCodes List<string>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    CountryCodes []string
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    ForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes List<String>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes string[]
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    country_codes Sequence[str]
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwarded_ip_config WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.
    countryCodes List<String>
    Array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166 international standard. See the documentation for valid values.
    forwardedIpConfig Property Map
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See forwarded_ip_config below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfig, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementGeoMatchStatementForwardedIpConfigArgs

    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    fallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    Name of the HTTP header to use for the IP address.
    fallback_behavior str
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    Name of the HTTP header to use for the IP address.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    Arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    IpSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn string
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn str
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ip_set_forwarded_ip_config WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.
    arn String
    The Amazon Resource Name (ARN) of the IP Set that this statement references.
    ipSetForwardedIpConfig Property Map
    Configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See ip_set_forwarded_ip_config below for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfig, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs

    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    Position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    FallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    HeaderName string
    Name of the HTTP header to use for the IP address.
    Position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    position String
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior string
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName string
    Name of the HTTP header to use for the IP address.
    position string
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallback_behavior str
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    header_name str
    Name of the HTTP header to use for the IP address.
    position str
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
    fallbackBehavior String
    Match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCH or NO_MATCH.
    headerName String
    Name of the HTTP header to use for the IP address.
    position String
    Position in the header to search for the IP address. Valid values include: FIRST, LAST, or ANY. If ANY is specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementLabelMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementLabelMatchStatementArgs

    Key string
    String to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    Key string
    String to match against.
    Scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    String to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key string
    String to match against.
    scope string
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key str
    String to match against.
    scope str
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.
    key String
    String to match against.
    scope String
    Specify whether you want to match using the label name or just the namespace. Valid values are LABEL or NAMESPACE.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementArgs

    RegexString string
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    RegexString string
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    regexString String
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    regexString string
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    regex_string str
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    regexString String
    String representing the regular expression. Minimum of 1 and maximum of 512 characters.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    The part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexMatchStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementArgs

    Arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    Arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    arn String
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    arn string
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    arn str
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    arn String
    The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementRegexPatternSetReferenceStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementArgs

    ComparisonOperator string
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    Size int
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    ComparisonOperator string
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    Size int
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    comparisonOperator String
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size Integer
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    comparisonOperator string
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size number
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    comparison_operator str
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size int
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    comparisonOperator String
    Operator to use to compare the request part to the size setting. Valid values include: EQ, NE, LE, LT, GE, or GT.
    size Number
    Size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSizeConstraintStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementArgs

    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatch, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchArgs

    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    AllQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    Body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    Cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    Headers []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader
    Inspect the request headers. See headers below for details.
    JsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    Method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    QueryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    SingleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    SingleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    UriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader>
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader[]
    Inspect the request headers. See headers below for details.
    jsonBody WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    singleQueryArgument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uriPath WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    all_query_arguments WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchAllQueryArguments
    Inspect all query arguments.
    body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies
    Inspect the cookies in the web request. See cookies below for details.
    headers Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader]
    Inspect the request headers. See headers below for details.
    json_body WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody
    Inspect the request body as JSON. See json_body for details.
    method WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchMethod
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    query_string WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchQueryString
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    single_header WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader
    Inspect a single header. See single_header below for details.
    single_query_argument WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument
    Inspect a single query argument. See single_query_argument below for details.
    uri_path WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchUriPath
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
    allQueryArguments Property Map
    Inspect all query arguments.
    body Property Map
    Inspect the request body, which immediately follows the request headers. See body below for details.
    cookies Property Map
    Inspect the cookies in the web request. See cookies below for details.
    headers List<Property Map>
    Inspect the request headers. See headers below for details.
    jsonBody Property Map
    Inspect the request body as JSON. See json_body for details.
    method Property Map
    Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
    queryString Property Map
    Inspect the query string. This is the part of a URL that appears after a ? character, if any.
    singleHeader Property Map
    Inspect a single header. See single_header below for details.
    singleQueryArgument Property Map
    Inspect a single query argument. See single_query_argument below for details.
    uriPath Property Map
    Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchBodyArgs

    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    OversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling string
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversize_handling str
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.
    oversizeHandling String
    What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookies, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesArgs

    MatchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    MatchPatterns []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    MatchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    OversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern[]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope string
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling string
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    match_patterns Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern]
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    match_scope str
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversize_handling str
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.
    matchPatterns List<Property Map>
    The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all, included_cookies or excluded_cookies. More details: CookieMatchPattern
    matchScope String
    The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL, KEY, VALUE
    oversizeHandling String
    What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE, MATCH, NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchCookiesMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedCookies List<String>
    includedCookies List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    MatchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    OversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope string
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling string
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    match_scope str
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversize_handling str
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.
    matchPattern Property Map
    The filter to use to identify the subset of headers to inspect in a web request. The match_pattern block supports only one of the following arguments:
    matchScope String
    The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following: ALL, Key, Value.
    oversizeHandling String
    Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE, MATCH, NO_MATCH. See the AWS documentation for more information.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternArgs

    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders List<string>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders List<string>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    All WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    ExcludedHeaders []string
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    IncludedHeaders []string
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders string[]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders string[]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchHeaderMatchPatternAll
    An empty configuration block that is used for inspecting all headers.
    excluded_headers Sequence[str]
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    included_headers Sequence[str]
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
    all Property Map
    An empty configuration block that is used for inspecting all headers.
    excludedHeaders List<String>
    An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
    includedHeaders List<String>
    An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBody, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyArgs

    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    MatchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    MatchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    InvalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    OversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope string
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior string
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling string
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    match_pattern WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    match_scope str
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalid_fallback_behavior str
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversize_handling str
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.
    matchPattern Property Map
    The patterns to look for in the JSON body. You must specify exactly one setting: either all or included_paths. See JsonMatchPattern for details.
    matchScope String
    The parts of the JSON to match against using the match_pattern. Valid values are ALL, KEY and VALUE.
    invalidFallbackBehavior String
    What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING, MATCH and NO_MATCH.
    oversizeHandling String
    What to do if the body is larger than can be inspected. Valid values are CONTINUE (default), MATCH and NO_MATCH.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchJsonBodyMatchPatternArgs

    all Property Map
    An empty configuration block that is used for inspecting all headers.
    includedPaths List<String>

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeader, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleHeaderArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgument, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementFieldToMatchSingleQueryArgumentArgs

    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    Name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name string
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name str
    Name of the query header to inspect. This setting must be provided as lower case characters.
    name String
    Name of the query header to inspect. This setting must be provided as lower case characters.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformation, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementSqliMatchStatementTextTransformationArgs

    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    Priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    Type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Integer
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type string
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority int
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type str
    Transformation to apply, please refer to the Text Transformation documentation for more details.
    priority Number
    Relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
    type String
    Transformation to apply, please refer to the Text Transformation documentation for more details.

    WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatement, WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementArgs

    TextTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    TextTransformations []WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    FieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations List<WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation[]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    text_transformations Sequence[WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementTextTransformation]
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    field_to_match WebAclRuleStatementAndStatementStatementAndStatementStatementNotStatementStatementXssMatchStatementFieldToMatch
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.
    textTransformations List<Property Map>
    Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See text_transformation below for details.
    fieldToMatch Property Map
    Part of a web request that you want AWS WAF to inspect. See field_to_match below for details.

    Import

    WAFv2 Web ACLs can be imported using ID/Name/Scope e.g.,

     $ pulumi import aws:wafv2/webAcl:WebAcl example a1b2c3d4-d5f6-7777-8888-9999aaaabbbbcccc/example/REGIONAL

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo
    Viewing docs for AWS v5.43.0 (Older version)
    published on Tuesday, Mar 10, 2026 by Pulumi
    Go to latest version
    Schema (JSON)
    pulumi/pulumi-aws
      Try Pulumi Cloud free. Your team will thank you.