Class CfnWebACL.AWSManagedRulesACFPRuleSetProperty
Details for your use of the account creation fraud prevention managed rule group, AWSManagedRulesACFPRuleSet
.
Inheritance
Namespace: Amazon.CDK.AWS.WAFv2
Assembly: Amazon.CDK.Lib.dll
Syntax (csharp)
public class AWSManagedRulesACFPRuleSetProperty : Object, CfnWebACL.IAWSManagedRulesACFPRuleSetProperty
Syntax (vb)
Public Class AWSManagedRulesACFPRuleSetProperty
Inherits Object
Implements CfnWebACL.IAWSManagedRulesACFPRuleSetProperty
Remarks
This configuration is used in ManagedRuleGroupConfig
.
ExampleMetadata: fixture=_generated
Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.WAFv2;
var aWSManagedRulesACFPRuleSetProperty = new AWSManagedRulesACFPRuleSetProperty {
CreationPath = "creationPath",
RegistrationPagePath = "registrationPagePath",
RequestInspection = new RequestInspectionACFPProperty {
PayloadType = "payloadType",
// the properties below are optional
AddressFields = new [] { new FieldIdentifierProperty {
Identifier = "identifier"
} },
EmailField = new FieldIdentifierProperty {
Identifier = "identifier"
},
PasswordField = new FieldIdentifierProperty {
Identifier = "identifier"
},
PhoneNumberFields = new [] { new FieldIdentifierProperty {
Identifier = "identifier"
} },
UsernameField = new FieldIdentifierProperty {
Identifier = "identifier"
}
},
// the properties below are optional
EnableRegexInPath = false,
ResponseInspection = new ResponseInspectionProperty {
BodyContains = new ResponseInspectionBodyContainsProperty {
FailureStrings = new [] { "failureStrings" },
SuccessStrings = new [] { "successStrings" }
},
Header = new ResponseInspectionHeaderProperty {
FailureValues = new [] { "failureValues" },
Name = "name",
SuccessValues = new [] { "successValues" }
},
Json = new ResponseInspectionJsonProperty {
FailureValues = new [] { "failureValues" },
Identifier = "identifier",
SuccessValues = new [] { "successValues" }
},
StatusCode = new ResponseInspectionStatusCodeProperty {
FailureCodes = new [] { 123 },
SuccessCodes = new [] { 123 }
}
}
};
Synopsis
Constructors
AWSManagedRulesACFPRuleSetProperty() |
Properties
CreationPath | The path of the account creation endpoint for your application. |
EnableRegexInPath | Allow the use of regular expressions in the registration page path and the account creation path. |
RegistrationPagePath | The path of the account registration endpoint for your application. |
RequestInspection | The criteria for inspecting account creation requests, used by the ACFP rule group to validate and track account creation attempts. |
ResponseInspection | The criteria for inspecting responses to account creation requests, used by the ACFP rule group to track account creation success rates. |
Constructors
AWSManagedRulesACFPRuleSetProperty()
public AWSManagedRulesACFPRuleSetProperty()
Properties
CreationPath
The path of the account creation endpoint for your application.
public string CreationPath { get; set; }
Property Value
System.String
Remarks
This is the page on your website that accepts the completed registration form for a new user. This page must accept POST
requests.
For example, for the URL https://example.com/web/newaccount
, you would provide the path /web/newaccount
. Account creation page paths that start with the path that you provide are considered a match. For example /web/newaccount
matches the account creation paths /web/newaccount
, /web/newaccount/
, /web/newaccountPage
, and /web/newaccount/thisPage
, but doesn't match the path /home/web/newaccount
or /website/newaccount
.
EnableRegexInPath
Allow the use of regular expressions in the registration page path and the account creation path.
public object EnableRegexInPath { get; set; }
Property Value
System.Object
Remarks
RegistrationPagePath
The path of the account registration endpoint for your application.
public string RegistrationPagePath { get; set; }
Property Value
System.String
Remarks
This is the page on your website that presents the registration form to new users.
This page must accept GET
text/html requests.
For example, for the URL https://example.com/web/registration
, you would provide the path /web/registration
. Registration page paths that start with the path that you provide are considered a match. For example /web/registration
matches the registration paths /web/registration
, /web/registration/
, /web/registrationPage
, and /web/registration/thisPage
, but doesn't match the path /home/web/registration
or /website/registration
.
RequestInspection
The criteria for inspecting account creation requests, used by the ACFP rule group to validate and track account creation attempts.
public object RequestInspection { get; set; }
Property Value
System.Object
Remarks
ResponseInspection
The criteria for inspecting responses to account creation requests, used by the ACFP rule group to track account creation success rates.
public object ResponseInspection { get; set; }
Property Value
System.Object
Remarks
Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.
The ACFP rule group evaluates the responses that your protected resources send back to client account creation attempts, keeping count of successful and failed attempts from each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many successful account creation attempts in a short amount of time.