Web Acl Aws Managed Rules Atp Rule Set Args
Configures how to use the Account Takeover Prevention managed rule group in the web ACL
Constructors
Properties
Allow the use of regular expressions in the login page path.
The path of the login endpoint for your application. For example, for the URL https://example.com/web/login
, you would provide the path /web/login
. Login paths that start with the path that you provide are considered a match. For example /web/login
matches the login paths /web/login
, /web/login/
, /web/loginPage
, and /web/login/thisPage
, but doesn't match the login path /home/web/login
or /website/login
. The rule group inspects only HTTP POST
requests to your specified login endpoint.
The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage.
The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates.