Class CfnRule
- All Implemented Interfaces:
IInspectable,IRuleRef,software.amazon.jsii.JsiiSerializable,software.constructs.IConstruct,software.constructs.IDependable
This is AWS WAF Classic documentation.
For more information, see AWS WAF Classic in the developer guide.
For the latest version of AWS WAF , use the AWS WAF V2 API and see the AWS WAF Developer Guide . With the latest version, AWS WAF has a single set of endpoints for regional and global use.
A combination of ByteMatchSet , IPSet , and/or SqlInjectionMatchSet objects that identify the web requests that you want to allow, block, or count. For example, you might create a Rule that includes the following predicates:
- An
IPSetthat causes AWS WAF to search for web requests that originate from the IP address192.0.2.44 - A
ByteMatchSetthat causes AWS WAF to search for web requests for which the value of theUser-Agentheader isBadBot.
To match the settings in this Rule , a request must originate from 192.0.2.44 AND include a User-Agent header for which the value is BadBot .
Example:
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.services.waf.regional.*;
CfnRule cfnRule = CfnRule.Builder.create(this, "MyCfnRule")
.metricName("metricName")
.name("name")
// the properties below are optional
.predicates(List.of(PredicateProperty.builder()
.dataId("dataId")
.negated(false)
.type("type")
.build()))
.build();
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic final classA fluent builder forCfnRule.static interfaceSpecifies theByteMatchSet,IPSet,SqlInjectionMatchSet,XssMatchSet,RegexMatchSet,GeoMatchSet, andSizeConstraintSetobjects that you want to add to aRuleand, for each object, indicates whether you want to negate the settings, for example, requests that do NOT originate from the IP address 192.0.2.44.Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationModeNested classes/interfaces inherited from interface software.constructs.IConstruct
software.constructs.IConstruct.Jsii$DefaultNested classes/interfaces inherited from interface software.amazon.awscdk.IInspectable
IInspectable.Jsii$Default, IInspectable.Jsii$ProxyNested classes/interfaces inherited from interface software.amazon.awscdk.services.waf.regional.IRuleRef
IRuleRef.Jsii$Default, IRuleRef.Jsii$Proxy -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final StringThe CloudFormation resource type name for this resource class. -
Constructor Summary
ConstructorsModifierConstructorDescriptionprotectedCfnRule(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) protectedCfnRule(software.amazon.jsii.JsiiObjectRef objRef) CfnRule(software.constructs.Construct scope, String id, CfnRuleProps props) -
Method Summary
Modifier and TypeMethodDescriptionA name for the metrics for thisRule.getName()The friendly name or description for theRule.ThePredicatesobject contains onePredicateelement for eachByteMatchSet,IPSet, orSqlInjectionMatchSetobject that you want to include in aRule.A reference to a Rule resource.voidinspect(TreeInspector inspector) Examines the CloudFormation resource and discloses attributes.renderProperties(Map<String, Object> props) voidsetMetricName(String value) A name for the metrics for thisRule.voidThe friendly name or description for theRule.voidsetPredicates(List<Object> value) ThePredicatesobject contains onePredicateelement for eachByteMatchSet,IPSet, orSqlInjectionMatchSetobject that you want to include in aRule.voidsetPredicates(IResolvable value) ThePredicatesobject contains onePredicateelement for eachByteMatchSet,IPSet, orSqlInjectionMatchSetobject that you want to include in aRule.Methods inherited from class software.amazon.awscdk.CfnResource
addDeletionOverride, addDependency, addDependsOn, addMetadata, addOverride, addPropertyDeletionOverride, addPropertyOverride, applyRemovalPolicy, applyRemovalPolicy, applyRemovalPolicy, getAtt, getAtt, getCfnOptions, getCfnResourceType, getMetadata, getUpdatedProperites, getUpdatedProperties, isCfnResource, obtainDependencies, obtainResourceDependencies, removeDependency, replaceDependency, shouldSynthesize, toString, validatePropertiesMethods inherited from class software.amazon.awscdk.CfnRefElement
getRefMethods inherited from class software.amazon.awscdk.CfnElement
getCreationStack, getLogicalId, getStack, isCfnElement, overrideLogicalIdMethods inherited from class software.constructs.Construct
getNode, isConstructMethods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSetMethods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitMethods inherited from interface software.constructs.IConstruct
getNodeMethods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Field Details
-
CFN_RESOURCE_TYPE_NAME
The CloudFormation resource type name for this resource class.
-
-
Constructor Details
-
CfnRule
protected CfnRule(software.amazon.jsii.JsiiObjectRef objRef) -
CfnRule
protected CfnRule(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) -
CfnRule
@Stability(Stable) public CfnRule(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull CfnRuleProps props) - Parameters:
scope- Scope in which this resource is defined. This parameter is required.id- Construct identifier for this resource (unique in its scope). This parameter is required.props- Resource properties. This parameter is required.
-
-
Method Details
-
inspect
Examines the CloudFormation resource and discloses attributes.- Specified by:
inspectin interfaceIInspectable- Parameters:
inspector- tree inspector to collect and process attributes. This parameter is required.
-
renderProperties
@Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String, Object> props) - Overrides:
renderPropertiesin classCfnResource- Parameters:
props- This parameter is required.
-
getAttrId
-
getCfnProperties
- Overrides:
getCfnPropertiesin classCfnResource
-
getRuleRef
A reference to a Rule resource.- Specified by:
getRuleRefin interfaceIRuleRef
-
getMetricName
A name for the metrics for thisRule. -
setMetricName
A name for the metrics for thisRule. -
getName
The friendly name or description for theRule. -
setName
The friendly name or description for theRule. -
getPredicates
ThePredicatesobject contains onePredicateelement for eachByteMatchSet,IPSet, orSqlInjectionMatchSetobject that you want to include in aRule.Returns union: either
IResolvableor Listinvalid input: '<'eitherIResolvableorCfnRule.PredicateProperty> -
setPredicates
ThePredicatesobject contains onePredicateelement for eachByteMatchSet,IPSet, orSqlInjectionMatchSetobject that you want to include in aRule. -
setPredicates
ThePredicatesobject contains onePredicateelement for eachByteMatchSet,IPSet, orSqlInjectionMatchSetobject that you want to include in aRule.
-