AWS::WAFv2::WebACL ResponseInspectionBodyContains - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::WAFv2::WebACL ResponseInspectionBodyContains

Configures inspection of the response body. Amazon WAF can inspect the first 65,536 bytes (64 KB) of the response body. This is part of the ResponseInspection configuration for AWSManagedRulesATPRuleSet and AWSManagedRulesACFPRuleSet.

Note

Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "FailureStrings" : [ String, ... ],
  "SuccessStrings" : [ String, ... ]
}

YAML

  FailureStrings: 
    - String
  SuccessStrings: 
    - String

Properties

FailureStrings

Strings in the body of the response that indicate a failed login or account creation attempt. To be counted as a failure, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.

JSON example: "FailureStrings": [ "Request failed" ]

Required: Yes

Type: Array of String

Minimum: 1 | 1

Maximum: 100 | 5

Update requires: No interruption

SuccessStrings

Strings in the body of the response that indicate a successful login or account creation attempt. To be counted as a success, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.

JSON examples: "SuccessStrings": [ "Login successful" ] and "SuccessStrings": [ "Account creation successful", "Welcome to our site!" ]

Required: Yes

Type: Array of String

Minimum: 1 | 1

Maximum: 100 | 5

Update requires: No interruption