Inspecting HTTP/2 pseudo headers in Amazon WAF

This section explains how you can use Amazon WAF to inspect HTTP/2 pseudo headers.

Protected Amazon resources that support HTTP/2 traffic do not forward HTTP/2 pseudo headers to Amazon WAF for inspection, but they provide contents of pseudo headers in web request components that Amazon WAF inspects.

You can use Amazon WAF to inspect only the pseudo headers that are listed in the following table.

HTTP/2 pseudo header contents mapped to web request components
HTTP/2 pseudo header	Web request component to inspect	Documentation
`:method`	HTTP method	HTTP method
`:authority`	`Host` header	Single header All headers
`:path` URI path	URI path	URI path
`:path` query	Query string	Query string Single query parameter All query parameters

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Using forwarded IP addresses

Using text transformations