Class CfnWebACL.FieldToMatchProperty.Jsii$Proxy
- All Implemented Interfaces:
CfnWebACL.FieldToMatchProperty,software.amazon.jsii.JsiiSerializable
- Enclosing interface:
CfnWebACL.FieldToMatchProperty
CfnWebACL.FieldToMatchProperty-
Nested Class Summary
Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationModeNested classes/interfaces inherited from interface software.amazon.awscdk.services.wafv2.CfnWebACL.FieldToMatchProperty
CfnWebACL.FieldToMatchProperty.Builder, CfnWebACL.FieldToMatchProperty.Jsii$Proxy -
Constructor Summary
ConstructorsModifierConstructorDescriptionprotectedConstructor that initializes the object based on literal property values passed by theCfnWebACL.FieldToMatchProperty.Builder.protectedJsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef) Constructor that initializes the object based on values retrieved from the JsiiObject. -
Method Summary
Modifier and TypeMethodDescriptioncom.fasterxml.jackson.databind.JsonNodefinal booleanfinal ObjectInspect all query arguments.final ObjectgetBody()Inspect the request body as plain text.final ObjectInspect the request cookies.final ObjectInspect the request headers.final ObjectAvailable for use with Amazon CloudFront distributions and Application Load Balancers.final ObjectAvailable for use with Amazon CloudFront distributions and Application Load Balancers.final ObjectInspect the request body as JSON.final ObjectInspect the HTTP method.final ObjectInspect the query string.final ObjectInspect a single header.final ObjectInspect a single query argument.final ObjectInspect fragments of the request URI.final ObjectInspect the request URI path.final inthashCode()Methods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet
-
Constructor Details
-
Jsii$Proxy
protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef) Constructor that initializes the object based on values retrieved from the JsiiObject.- Parameters:
objRef- Reference to the JSII managed object.
-
Jsii$Proxy
Constructor that initializes the object based on literal property values passed by theCfnWebACL.FieldToMatchProperty.Builder.
-
-
Method Details
-
getAllQueryArguments
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect all query arguments.- Specified by:
getAllQueryArgumentsin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getBody
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect the request body as plain text.The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL
AssociationConfig, for additional processing fees. - For AWS Amplify , use the CloudFront limit.
For information about how to handle oversized request bodies, see the
Bodyobject configuration.Returns union: either
IResolvableorCfnWebACL.BodyProperty- Specified by:
getBodyin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getCookies
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect the request cookies.You must configure scope and pattern matching filters in the
Cookiesobject, to define the set of cookies and the parts of the cookies that AWS WAF inspects.Only the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the
Cookiesobject. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.Returns union: either
IResolvableorCfnWebACL.CookiesProperty- Specified by:
getCookiesin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getHeaders
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect the request headers.You must configure scope and pattern matching filters in the
Headersobject, to define the set of headers to and the parts of the headers that AWS WAF inspects.Only the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the
Headersobject. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service.Returns union: either
IResolvableorCfnWebACL.HeadersProperty- Specified by:
getHeadersin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getJa3Fingerprint
Description copied from interface:CfnWebACL.FieldToMatchPropertyAvailable for use with Amazon CloudFront distributions and Application Load Balancers.Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.
You can use this choice only with a string match
ByteMatchStatementwith thePositionalConstraintset toEXACTLY.You can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see Log fields in the AWS WAF Developer Guide .
Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.
Returns union: either
IResolvableorCfnWebACL.JA3FingerprintProperty- Specified by:
getJa3Fingerprintin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getJa4Fingerprint
Description copied from interface:CfnWebACL.FieldToMatchPropertyAvailable for use with Amazon CloudFront distributions and Application Load Balancers.Match against the request's JA4 fingerprint. The JA4 fingerprint is a 36-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.
You can use this choice only with a string match
ByteMatchStatementwith thePositionalConstraintset toEXACTLY.You can obtain the JA4 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see Log fields in the AWS WAF Developer Guide .
Provide the JA4 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.
Returns union: either
IResolvableorCfnWebACL.JA4FingerprintProperty- Specified by:
getJa4Fingerprintin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getJsonBody
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect the request body as JSON.The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
AWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.
- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL
AssociationConfig, for additional processing fees. - For AWS Amplify , use the CloudFront limit.
For information about how to handle oversized request bodies, see the
JsonBodyobject configuration.Returns union: either
IResolvableorCfnWebACL.JsonBodyProperty- Specified by:
getJsonBodyin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getMethod
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect the HTTP method.The method indicates the type of operation that the request is asking the origin to perform.
- Specified by:
getMethodin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getQueryString
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect the query string.This is the part of a URL that appears after a
?character, if any.- Specified by:
getQueryStringin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getSingleHeader
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect a single header.Provide the name of the header to inspect, for example,
User-AgentorReferer. This setting isn't case sensitive.Example JSON:
"SingleHeader": { "Name": "haystack" }Alternately, you can filter and inspect all headers with the
HeadersFieldToMatchsetting.- Specified by:
getSingleHeaderin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getSingleQueryArgument
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect a single query argument.Provide the name of the query argument to inspect, such as UserName or SalesRegion . The name can be up to 30 characters long and isn't case sensitive.
Example JSON:
"SingleQueryArgument": { "Name": "myArgument" }- Specified by:
getSingleQueryArgumentin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getUriFragment
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect fragments of the request URI.You must configure scope and pattern matching filters in the
UriFragmentobject, to define the fragment of a URI that AWS WAF inspects.Only the first 8 KB (8192 bytes) of a request's URI fragments and only the first 200 URI fragments are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize URI fragment content in the
UriFragmentobject. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.Returns union: either
IResolvableorCfnWebACL.UriFragmentProperty- Specified by:
getUriFragmentin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
getUriPath
Description copied from interface:CfnWebACL.FieldToMatchPropertyInspect the request URI path.This is the part of the web request that identifies a resource, for example,
/images/daily-ad.jpg.- Specified by:
getUriPathin interfaceCfnWebACL.FieldToMatchProperty- See Also:
-
$jsii$toJson
@Internal public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()- Specified by:
$jsii$toJsonin interfacesoftware.amazon.jsii.JsiiSerializable
-
equals
-
hashCode
public final int hashCode()
-