Builder

class Builder

Properties

Link copied to clipboard

A logical rule statement used to combine other rule statements with AND logic. You provide more than one Statement within the AndStatement.

Link copied to clipboard

A rule statement that defines a string match search for WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the WAF console and the developer guide, this is called a string match statement.

Link copied to clipboard

A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.

Link copied to clipboard

A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an IPSet that specifies the addresses you want to detect, then use the ARN of that set in this statement. To create an IP set, see CreateIPSet.

Link copied to clipboard

A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.

Link copied to clipboard

A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names by calling ListAvailableManagedRuleGroups.

Link copied to clipboard

A logical rule statement used to negate the results of another rule statement. You provide one Statement within the NotStatement.

Link copied to clipboard

A logical rule statement used to combine other rule statements with OR logic. You provide more than one Statement within the OrStatement.

Link copied to clipboard

A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.

Link copied to clipboard

A rule statement used to search web request components for a match against a single regular expression.

Link copied to clipboard

A rule statement used to search web request components for matches with regular expressions. To use this, create a RegexPatternSet that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set. To create a regex pattern set, see CreateRegexPatternSet.

Link copied to clipboard

A rule statement used to run the rules that are defined in a RuleGroup. To use this, create a rule group with your rules, then provide the ARN of the rule group in this statement.

Link copied to clipboard

A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.

Link copied to clipboard

A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it.

Link copied to clipboard

A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.

Functions

Link copied to clipboard
Link copied to clipboard
Link copied to clipboard