AWS AWSCloudFormation documentation change
Summary
Added UriFragment configuration documentation for WAFv2 WebACL FieldToMatch
Security assessment
Documentation for new URI fragment inspection capability as a security feature, no vulnerability addressed
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtomatch.md b/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtomatch.md index fb622b05b..fde169a72 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtomatch.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-webacl-fieldtomatch.md @@ -48,0 +49 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "UriFragment" : [UriFragment](./aws-properties-wafv2-webacl-urifragment.html), @@ -74,0 +76,2 @@ To declare this entity in your AWS CloudFormation template, use the following sy + UriFragment: + [UriFragment](./aws-properties-wafv2-webacl-urifragment.html) @@ -101,0 +105,2 @@ AWS WAF does not support inspecting the entire contents of the web request body + * For AWS Amplify, use the CloudFront limit. + @@ -187,0 +193,2 @@ AWS WAF does not support inspecting the entire contents of the web request body + * For AWS Amplify, use the CloudFront limit. + @@ -247,0 +255,13 @@ _Required_ : No + +`UriFragment` + + +Inspect fragments of the request URI. You must configure scope and pattern matching filters in the `UriFragment` object, to define the fragment of a URI that AWS WAF inspects. + +Only the first 8 KB (8192 bytes) of a request's URI fragments and only the first 200 URI fragments are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize URI fragment content in the `UriFragment` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service. + +_Required_ : No + + _Type_ : [UriFragment](./aws-properties-wafv2-webacl-urifragment.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)