Package software.amazon.awscdk.services.wafv2

Interface CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty.Jsii$Proxy

Enclosing class:

CfnWebACL

@Stability(Stable)
public static interface CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty
extends software.amazon.jsii.JsiiSerializable

Configures the use of the anti-DDoS managed rule group, AWSManagedRulesAntiDDoSRuleSet . This configuration is used in ManagedRuleGroupConfig .

The configuration that you provide here determines whether and how the rules in the rule group are used.

For additional information about this and the other intelligent threat mitigation rule groups, see Intelligent threat mitigation in AWS WAF and AWS Managed Rules rule groups list in the AWS WAF Developer Guide .

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.wafv2.*;
 AWSManagedRulesAntiDDoSRuleSetProperty aWSManagedRulesAntiDDoSRuleSetProperty = AWSManagedRulesAntiDDoSRuleSetProperty.builder()
         .clientSideActionConfig(ClientSideActionConfigProperty.builder()
                 .challenge(ClientSideActionProperty.builder()
                         .usageOfAction("usageOfAction")
                         // the properties below are optional
                         .exemptUriRegularExpressions(List.of(RegexProperty.builder()
                                 .regexString("regexString")
                                 .build()))
                         .sensitivity("sensitivity")
                         .build())
                 .build())
         // the properties below are optional
         .sensitivityToBlock("sensitivityToBlock")
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-awsmanagedrulesantiddosruleset.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty.Builder	A builder for CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty
static final class	CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty.Jsii$Proxy	An implementation for CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty

Method Summary

Modifier and Type	Method	Description
static CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty.Builder	builder()
Object	getClientSideActionConfig()	Configures the request handling that's applied by the managed rule group rules ChallengeAllDuringEvent and ChallengeDDoSRequests during a distributed denial of service (DDoS) attack.
default String	getSensitivityToBlock()	The sensitivity that the rule group rule DDoSRequests uses when matching against the DDoS suspicion labeling on a request.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getClientSideActionConfig

@Stability(Stable)
@NotNull
Object getClientSideActionConfig()

Configures the request handling that's applied by the managed rule group rules ChallengeAllDuringEvent and ChallengeDDoSRequests during a distributed denial of service (DDoS) attack.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-awsmanagedrulesantiddosruleset.html#cfn-wafv2-webacl-awsmanagedrulesantiddosruleset-clientsideactionconfig

getSensitivityToBlock

@Stability(Stable)
@Nullable
default String getSensitivityToBlock()

The sensitivity that the rule group rule DDoSRequests uses when matching against the DDoS suspicion labeling on a request.

The managed rule group adds the labeling during DDoS events, before the DDoSRequests rule runs.

The higher the sensitivity, the more levels of labeling that the rule matches:

• Low sensitivity is less sensitive, causing the rule to match only on the most likely participants in an attack, which are the requests with the high suspicion label awswaf:managed:aws:anti-ddos:high-suspicion-ddos-request .
• Medium sensitivity causes the rule to match on the medium and high suspicion labels.
• High sensitivity causes the rule to match on all of the suspicion labels: low, medium, and high.

Default: LOW

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-awsmanagedrulesantiddosruleset.html#cfn-wafv2-webacl-awsmanagedrulesantiddosruleset-sensitivitytoblock

builder

@Stability(Stable)
static CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty.Builder builder()

Returns:

a CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty.Builder of CfnWebACL.AWSManagedRulesAntiDDoSRuleSetProperty