AWS::WAFv2::WebACL ResponseInspectionBodyContains
Configures inspection of the response body. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response body.
This is part of the ResponseInspection
configuration for AWSManagedRulesATPRuleSet
and AWSManagedRulesACFPRuleSet
.
Note
Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "FailureStrings" :
[ String, ... ]
, "SuccessStrings" :[ String, ... ]
}
YAML
FailureStrings:
- String
SuccessStrings:- String
Properties
FailureStrings
-
Strings in the body of the response that indicate a failed login or account creation attempt. To be counted as a failure, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.
JSON example:
"FailureStrings": [ "Request failed" ]
Required: Yes
Type: Array of String
Minimum:
1 | 1
Maximum:
100 | 5
Update requires: No interruption
SuccessStrings
-
Strings in the body of the response that indicate a successful login or account creation attempt. To be counted as a success, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.
JSON examples:
"SuccessStrings": [ "Login successful" ]
and"SuccessStrings": [ "Account creation successful", "Welcome to our site!" ]
Required: Yes
Type: Array of String
Minimum:
1 | 1
Maximum:
100 | 5
Update requires: No interruption