AWS::WAFv2::WebACL XssMatchStatement - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::WAFv2::WebACL XssMatchStatement

A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

Properties

FieldToMatch

The part of the web request that you want Amazon WAF to inspect.

Required: Yes

Type: FieldToMatch

Update requires: No interruption

TextTransformations

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the FieldToMatch request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, Amazon WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the component contents.

Required: Yes

Type: List of TextTransformation

Update requires: No interruption