Class: AWSCDK::WAFv2::CfnWebACL::AWSManagedRulesAntiDDoSRuleSetProperty

Inherits:

Jsii::Struct

• Object
• Jsii::Struct
• AWSCDK::WAFv2::CfnWebACL::AWSManagedRulesAntiDDoSRuleSetProperty

Defined in:

wa_fv2/cfn_web_acl.rb

Overview

Configures the use of the anti-DDoS managed rule group, AWSManagedRulesAntiDDoSRuleSet . This configuration is used in ManagedRuleGroupConfig .

The configuration that you provide here determines whether and how the rules in the rule group are used.

For additional information about this and the other intelligent threat mitigation rule groups, see Intelligent threat mitigation in AWS WAF and AWS Managed Rules rule groups list in the AWS WAF Developer Guide .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-awsmanagedrulesantiddosruleset.html

Instance Attribute Summary

• #client_side_action_config ⇒ AWSCDK::IResolvable, AWSCDK::WAFv2::CfnWebACL::ClientSideActionConfigProperty readonly

  Configures the request handling that's applied by the managed rule group rules ChallengeAllDuringEvent and ChallengeDDoSRequests during a distributed denial of service (DDoS) attack.

• #sensitivity_to_block ⇒ String^? readonly

  The sensitivity that the rule group rule DDoSRequests uses when matching against the DDoS suspicion labeling on a request.

Class Method Summary

• .jsii_properties ⇒ Object

Instance Method Summary

• #initialize(client_side_action_config:, sensitivity_to_block: nil) ⇒ AWSManagedRulesAntiDDoSRuleSetProperty constructor

  A new instance of AWSManagedRulesAntiDDoSRuleSetProperty.

• #to_jsii ⇒ Object

Constructor Details

#initialize(client_side_action_config:, sensitivity_to_block: nil) ⇒ AWSManagedRulesAntiDDoSRuleSetProperty

Returns a new instance of AWSManagedRulesAntiDDoSRuleSetProperty.

Parameters:

• client_side_action_config (AWSCDK::IResolvable, AWSCDK::WAFv2::CfnWebACL::ClientSideActionConfigProperty) —

  Configures the request handling that's applied by the managed rule group rules ChallengeAllDuringEvent and ChallengeDDoSRequests during a distributed denial of service (DDoS) attack.

• sensitivity_to_block (String, nil) (defaults to: nil) —

  The sensitivity that the rule group rule DDoSRequests uses when matching against the DDoS suspicion labeling on a request.

# File 'wa_fv2/cfn_web_acl.rb', line 944

def initialize(client_side_action_config:, sensitivity_to_block: nil)
  @client_side_action_config = client_side_action_config.is_a?(Hash) ? ::AWSCDK::WAFv2::CfnWebACL::ClientSideActionConfigProperty.new(**client_side_action_config.transform_keys(&:to_sym)) : client_side_action_config
  Jsii::Type.check_type(@client_side_action_config, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImZxbiI6ImF3cy1jZGstbGliLmF3c193YWZ2Mi5DZm5XZWJBQ0wuQ2xpZW50U2lkZUFjdGlvbkNvbmZpZ1Byb3BlcnR5In1dfX0=")), "clientSideActionConfig")
  @sensitivity_to_block = sensitivity_to_block
  Jsii::Type.check_type(@sensitivity_to_block, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "sensitivityToBlock") unless @sensitivity_to_block.nil?
end

Instance Attribute Details

#client_side_action_config ⇒ AWSCDK::IResolvable, AWSCDK::WAFv2::CfnWebACL::ClientSideActionConfigProperty (readonly)

Configures the request handling that's applied by the managed rule group rules ChallengeAllDuringEvent and ChallengeDDoSRequests during a distributed denial of service (DDoS) attack.

Returns:

• (AWSCDK::IResolvable, AWSCDK::WAFv2::CfnWebACL::ClientSideActionConfigProperty)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-awsmanagedrulesantiddosruleset.html#cfn-wafv2-webacl-awsmanagedrulesantiddosruleset-clientsideactionconfig

# File 'wa_fv2/cfn_web_acl.rb', line 955

def client_side_action_config
  @client_side_action_config
end

#sensitivity_to_block ⇒ String^? (readonly)

The sensitivity that the rule group rule DDoSRequests uses when matching against the DDoS suspicion labeling on a request.

The managed rule group adds the labeling during DDoS events, before the DDoSRequests rule runs.

The higher the sensitivity, the more levels of labeling that the rule matches:

• Low sensitivity is less sensitive, causing the rule to match only on the most likely participants in an attack, which are the requests with the high suspicion label awswaf:managed:aws:anti-ddos:high-suspicion-ddos-request .
• Medium sensitivity causes the rule to match on the medium and high suspicion labels.
• High sensitivity causes the rule to match on all of the suspicion labels: low, medium, and high.

Default: LOW

Returns:

• (String, nil)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-awsmanagedrulesantiddosruleset.html#cfn-wafv2-webacl-awsmanagedrulesantiddosruleset-sensitivitytoblock

# File 'wa_fv2/cfn_web_acl.rb', line 970

def sensitivity_to_block
  @sensitivity_to_block
end

Class Method Details

.jsii_properties ⇒ Object

# File 'wa_fv2/cfn_web_acl.rb', line 972

def self.jsii_properties
  {
    :client_side_action_config => "clientSideActionConfig",
    :sensitivity_to_block => "sensitivityToBlock",
  }
end

Instance Method Details

#to_jsii ⇒ Object

# File 'wa_fv2/cfn_web_acl.rb', line 979

def to_jsii
  result = {}
  result.merge!({
    "clientSideActionConfig" => @client_side_action_config,
    "sensitivityToBlock" => @sensitivity_to_block,
  })
  result.compact
end