AWS WAF V2 Web ACL
This page shows how to write Terraform and CloudFormation for AWS WAF V2 Web ACL and write them securely.
aws_wafv2_web_acl (Terraform)
The Web ACL in AWS WAF V2 can be configured in Terraform with the resource name aws_wafv2_web_acl
. The following sections describe 4 examples of how to use the resource and its parameters.
Example Usage from GitHub
main.tf#L1
resource "aws_wafv2_web_acl" "aws_wafv2_web_acl_REGIONAL" {
name = "REGIONAL-managed-rule"
description = "Example of a REGIONAL managed rule."
scope = "REGIONAL"
default_action {
waf.tf#L2
resource "aws_wafv2_web_acl" "wec_acl" {
name = "web-acl"
scope = "REGIONAL"
default_action {
allow {}
waf2.tf#L1
resource "aws_wafv2_web_acl" "pass" {
name = "managed-rule-example"
description = "Example of a managed rule."
scope = "REGIONAL"
default_action {
waf.tf#L5
resource "aws_wafv2_web_acl" "covidportal_acl" {
name = "covid_portal"
scope = "REGIONAL"
default_action {
allow {}
Parameters
-
arn
optional computed - string -
capacity
optional computed - number -
description
optional - string -
id
optional computed - string -
lock_token
optional computed - string -
name
required - string -
scope
required - string -
tags
optional - map from string to string -
default_action
list block -
rule
set block-
name
required - string -
priority
required - number -
action
list block -
override_action
list block -
statement
list block-
and_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
managed_rule_group_statement
list block-
name
required - string -
vendor_name
required - string -
excluded_rule
list block-
name
required - string
-
-
-
not_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
rate_based_statement
list block-
aggregate_key_type
optional - string -
limit
required - number -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
scope_down_statement
list block-
and_statement
list block-
statement
list block-
and_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
not_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
sqli_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
xss_match_statement
list block-
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
or_statement
list block-
statement
list block-
byte_match_statement
list block-
positional_constraint
required - string -
search_string
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
geo_match_statement
list block-
country_codes
required - list of string -
forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string
-
-
-
ip_set_reference_statement
list block-
arn
required - string -
ip_set_forwarded_ip_config
list block-
fallback_behavior
required - string -
header_name
required - string -
position
required - string
-
-
-
regex_pattern_set_reference_statement
list block-
arn
required - string -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
size_constraint_statement
list block-
comparison_operator
required - string -
size
required - number -
field_to_match
list block-
all_query_arguments
list block -
body
list block -
method
list block -
query_string
list block -
single_header
list block-
name
required - string
-
-
single_query_argument
list block-
name
required - string
-
-
uri_path
list block
-
-
text_transformation
set block
-
-
-
-
-
-
-
-
-