When you create a rule with a block action, you can send a custom response to the web request. If you don't specify this, AWS WAF uses its default settings for ChallengeConfig.Ī map of custom response keys and content bodies. Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own ChallengeConfig settings.

If you don't specify this, AWS WAF uses its default settings for CaptchaConfig. Specifies how AWS WAF should handle CAPTCHA evaluations for rules that don't have their own CaptchaConfig settings. (#cfn-wafv2-webacl-customresponsebodies): To declare this entity in your AWS CloudFormation template, use the following syntax: JSON The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AWS AppSync GraphQL API, or an Amazon Cognito user pool. You can associate a web ACL with one or more AWS resources to protect. The rules in a web ACL can contain rule statements that you define explicitly and rule statements that reference rule groups and managed rule groups. In the web ACL, you specify a default action to take (allow, block) for any request that doesn't match any of the rules. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. Use an AWS::WAFv2::WebACL to define a collection of rules to use to inspect and control web requests. For information, including how to migrate your AWS WAF resources from the prior release, see the AWS WAF Developer Guide. This is the latest version of AWS WAF, named AWS WAFV2, released in November, 2019.

Aws wafv2