AWS AWSCloudFormation documentation change
Summary
Added UriFragment configuration documentation for WAFv2 RuleGroup FieldToMatch
Security assessment
Added documentation for inspecting URI fragments which is a security feature, but no evidence of addressing a specific vulnerability
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-fieldtomatch.md b/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-fieldtomatch.md index 6c1a8d6fd..4dfd85805 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-fieldtomatch.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-fieldtomatch.md @@ -48,0 +49 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "UriFragment" : [UriFragment](./aws-properties-wafv2-rulegroup-urifragment.html), @@ -74,0 +76,2 @@ To declare this entity in your AWS CloudFormation template, use the following sy + UriFragment: + [UriFragment](./aws-properties-wafv2-rulegroup-urifragment.html) @@ -101,0 +105,2 @@ AWS WAF does not support inspecting the entire contents of the web request body + * For AWS Amplify, use the CloudFront limit. + @@ -187,0 +193,2 @@ AWS WAF does not support inspecting the entire contents of the web request body + * For AWS Amplify, use the CloudFront limit. + @@ -247,0 +255,13 @@ _Required_ : No + +`UriFragment` + + +Inspect fragments of the request URI. You must configure scope and pattern matching filters in the `UriFragment` object, to define the fragment of a URI that AWS WAF inspects. + +Only the first 8 KB (8192 bytes) of a request's URI fragments and only the first 200 URI fragments are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize URI fragment content in the `UriFragment` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service. + +_Required_ : No + + _Type_ : [UriFragment](./aws-properties-wafv2-rulegroup-urifragment.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)