WebAclAwsManagedRulesAtpRuleSet

data class WebAclAwsManagedRulesAtpRuleSet(val enableRegexInPath: Boolean? = null, val loginPath: String, val requestInspection: WebAclRequestInspection? = null, val responseInspection: WebAclResponseInspection? = null)

Configures how to use the Account Takeover Prevention managed rule group in the web ACL

Constructors

Link copied to clipboard
constructor(enableRegexInPath: Boolean? = null, loginPath: String, requestInspection: WebAclRequestInspection? = null, responseInspection: WebAclResponseInspection? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

Allow the use of regular expressions in the login page path.

Link copied to clipboard

The path of the login endpoint for your application. For example, for the URL https://example.com/web/login , you would provide the path /web/login . Login paths that start with the path that you provide are considered a match. For example /web/login matches the login paths /web/login , /web/login/ , /web/loginPage , and /web/login/thisPage , but doesn't match the login path /home/web/login or /website/login . The rule group inspects only HTTP POST requests to your specified login endpoint.

Link copied to clipboard

The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage.

Link copied to clipboard

The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates.