AWS::WAFv2::WebACL ResponseInspectionHeader - AWS CloudFormation
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::WAFv2::WebACL ResponseInspectionHeader

Configures inspection of the response header. This is part of the ResponseInspection configuration for AWSManagedRulesATPRuleSet and AWSManagedRulesACFPRuleSet.

Note

Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{ "FailureValues" : [ String, ... ], "Name" : String, "SuccessValues" : [ String, ... ] }

YAML

FailureValues: - String Name: String SuccessValues: - String

Properties

FailureValues

Values in the response header with the specified name that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON examples: "FailureValues": [ "LoginFailed", "Failed login" ] and "FailureValues": [ "AccountCreationFailed" ]

Required: Yes

Type: Array of String

Minimum: 1 | 1

Maximum: 100 | 3

Update requires: No interruption

Name

The name of the header to match against. The name must be an exact match, including case.

JSON example: "Name": [ "RequestResult" ]

Required: Yes

Type: String

Pattern: .*\S.*

Minimum: 1

Maximum: 200

Update requires: No interruption

SuccessValues

Values in the response header with the specified name that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.

JSON examples: "SuccessValues": [ "LoginPassed", "Successful login" ] and "SuccessValues": [ "AccountCreated", "Successful account creation" ]

Required: Yes

Type: Array of String

Minimum: 1 | 1

Maximum: 100 | 3

Update requires: No interruption