Top / Amazon Web Service / AWS WAF Regional / Regional XSS Match Set

AWS WAF Regional Regional XSS Match Set

This page shows how to write Terraform and CloudFormation for AWS WAF Regional Regional XSS Match Set and write them securely.

terraform-logo

Review your .tf file for AWS best practices

Shisho Cloud, our free checker to make sure your Terraform configuration follows best practices, is available (beta).

aws_wafregional_xss_match_set (Terraform)

The Regional XSS Match Set in AWS WAF Regional can be configured in Terraform with the resource name aws_wafregional_xss_match_set. The following sections describe 3 examples of how to use the resource and its parameters.

Example Usage from GitHub

waf_condition_xss.tf#L5
resource "aws_wafregional_xss_match_set" "xss_match_set" {
  name = "detect-xss"

  xss_match_tuple {
    text_transformation = "HTML_ENTITY_DECODE"
main.tf#L7
resource "aws_wafregional_xss_match_set" "this" {
  name = var.name

  dynamic "xss_match_tuple" {
    for_each = var.xss_match_tuple
    content {
waf_condition_xss.tf#L5
resource "aws_wafregional_xss_match_set" "xss_match_set" {
  name = "detect-xss"

  xss_match_tuple {
    text_transformation = "HTML_ENTITY_DECODE"

Review your Terraform file for AWS best practices

Shisho Cloud, our free checker to make sure your Terraform configuration follows best practices, is available (beta).

Parameters

>> from Terraform Registry

Explanation in Terraform Registry

Provides a WAF Regional XSS Match Set Resource for use with Application Load Balancer.

>> from Terraform Registry

AWS::WAFRegional::XssMatchSet (CloudFormation)

The XssMatchSet in WAFRegional can be configured in CloudFormation with the resource name AWS::WAFRegional::XssMatchSet. The following sections describe 10 examples of how to use the resource and its parameters.

Example Usage from GitHub

csye6225-cf-application-waf-temp.yml#L92
    Type: AWS::WAFRegional::XssMatchSet
    Properties:
      Name: !Sub '${AWS::StackName}-detect-xss'
      XssMatchTuples:
        - FieldToMatch:
            Type: URI
csye6225-cf-application-waf-temp.yml#L92
    Type: AWS::WAFRegional::XssMatchSet
    Properties:
      Name: !Sub '${AWS::StackName}-detect-xss'
      XssMatchTuples:
        - FieldToMatch:
            Type: URI
csye6225-cf-application-waf-temp.yml#L92
    Type: AWS::WAFRegional::XssMatchSet
    Properties:
      Name: !Sub '${AWS::StackName}-detect-xss'
      XssMatchTuples:
        - FieldToMatch:
            Type: URI
waf-regional.yml#L60
    Type: AWS::WAFRegional::XssMatchSet
    Properties:
      Name: !Sub ${StackPrefix}DetectXSS
      XssMatchTuples:
        - FieldToMatch:
            Type: URI
waf.yml#L34
    Type: AWS::WAFRegional::XssMatchSet
    Properties:
      Name: !Sub ${AWS::StackName}-XssSet
      XssMatchTuples:
        - FieldToMatch:
            Type: URI
WAFRegionalXssMatchSetSpecification.json#L3
    "AWS::WAFRegional::XssMatchSet.XssMatchTuple": {
      "Documentation": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html",
      "Properties": {
        "TextTransformation": {
          "Required": true,
          "Documentation": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html#cfn-wafregional-xssmatchset-xssmatchtuple-texttransformation",
WAFRegionalXssMatchSetSpecification.json#L3
    "AWS::WAFRegional::XssMatchSet.XssMatchTuple": {
      "Documentation": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html",
      "Properties": {
        "TextTransformation": {
          "Required": true,
          "Documentation": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html#cfn-wafregional-xssmatchset-xssmatchtuple-texttransformation",
WAFRegionalXssMatchSetSpecification.json#L3
    "AWS::WAFRegional::XssMatchSet.XssMatchTuple": {
      "Documentation": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html",
      "Properties": {
        "TextTransformation": {
          "Required": true,
          "Documentation": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html#cfn-wafregional-xssmatchset-xssmatchtuple-texttransformation",
WAFRegionalXssMatchSetSpecification.json#L3
    "AWS::WAFRegional::XssMatchSet.XssMatchTuple": {
      "Documentation": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html",
      "Properties": {
        "TextTransformation": {
          "Required": true,
          "Documentation": "http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafregional-xssmatchset-xssmatchtuple.html#cfn-wafregional-xssmatchset-xssmatchtuple-texttransformation",
web-acl-template.json#L186
            "Type": "AWS::WAFRegional::XssMatchSet",
            "Properties": {
                "Name": "${stack}-${instance}-URI-Query-XSS-Rule",
                "XssMatchTuples": [
                    {
                        "FieldToMatch": {

Parameters

>> from AWS CloudFormation Documentation

Explanation in CloudFormation Registry

Note This is AWS WAF Classic documentation. For more information, see AWS WAF Classic in the developer guide. For the latest version of AWS WAF , use the AWS WAFV2 API and see the AWS WAF Developer Guide. With the latest version, AWS WAF has a single set of endpoints for regional and global use. A complex type that contains XssMatchTuple objects, which specify the parts of web requests that you want AWS WAF to inspect for cross-site scripting attacks and, if you want AWS WAF to inspect a header, the name of the header. If a XssMatchSet contains more than one XssMatchTuple object, a request needs to include cross-site scripting attacks in only one of the specified parts of the request to be considered a match.

>> from AWS CloudFormation Documentation

The Other Related AWS WAF Regional Resources

Frequently asked questions

What is AWS WAF Regional Regional XSS Match Set?

AWS WAF Regional Regional XSS Match Set is a resource for WAF Regional of Amazon Web Service. Settings can be wrote in Terraform and CloudFormation.

Where can I find the example code for the AWS WAF Regional Regional XSS Match Set?

For Terraform, the dwp/dataworks-metrics-infrastructure, niveklabs/aws and dwp/aws-analytical-env source code examples are useful. See the Terraform Example section for further details.

For CloudFormation, the gandhi-mansi/csye6225-su19-ccwebapp, cyrilsebastian1811/csye6225-webapp and cyrilsebastian1811/Library-Management-System source code examples are useful. See the CloudFormation Example section for further details.

security-icon

Automate config file reviews on your commits

Fix issues in your infrastructure as code with auto-generated patches.

Table of Contents