interface CaptchaActionProperty
| Language | Type name |
|---|---|
.NET | Amazon.CDK.AWS.WAFv2.CfnWebACL.CaptchaActionProperty |
Go | github.com/aws/aws-cdk-go/awscdk/v2/awswafv2#CfnWebACL_CaptchaActionProperty |
Java | software.amazon.awscdk.services.wafv2.CfnWebACL.CaptchaActionProperty |
Python | aws_cdk.aws_wafv2.CfnWebACL.CaptchaActionProperty |
TypeScript | aws-cdk-lib » aws_wafv2 » CfnWebACL » CaptchaActionProperty |
Specifies that AWS WAF should run a CAPTCHA check against the request:.
- If the request includes a valid, unexpired
CAPTCHAtoken, AWS WAF allows the web request inspection to proceed to the next rule, similar to aCountAction. - If the request doesn't include a valid, unexpired
CAPTCHAtoken, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.
AWS WAF generates a response that it sends back to the client, which includes the following:
- The header
x-amzn-waf-actionwith a value ofcaptcha. - The HTTP status code
405 Method Not Allowed. - If the request contains an
Acceptheader with a value oftext/html, the response includes aCAPTCHAchallenge.
You can configure the expiration time in the CaptchaConfig ImmunityTimeProperty setting at the rule and web ACL level. The rule setting overrides the web ACL setting.
This action option is available for rules. It isn't available for web ACL default actions.
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_wafv2 as wafv2 } from 'aws-cdk-lib';
const captchaActionProperty: wafv2.CfnWebACL.CaptchaActionProperty = {
customRequestHandling: {
insertHeaders: [{
name: 'name',
value: 'value',
}],
},
};
Properties
| Name | Type | Description |
|---|---|---|
| custom | IResolvable | Custom | Defines custom handling for the web request, used when the CAPTCHA inspection determines that the request's token is valid and unexpired. |
customRequestHandling?
Type:
IResolvable | Custom
(optional)
Defines custom handling for the web request, used when the CAPTCHA inspection determines that the request's token is valid and unexpired.
For information about customizing web requests and responses, see Customizing web requests and responses in AWS WAF in the AWS WAF Developer Guide .

.NET
Go
Java
Python
TypeScript