Struct aws_sdk_wafv2::types::SizeConstraintStatement

#[non_exhaustive]
pub struct SizeConstraintStatement {
    pub field_to_match: Option<FieldToMatch>,
    pub comparison_operator: ComparisonOperator,
    pub size: i64,
    pub text_transformations: Vec<TextTransformation>,
}

A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.

If you configure WAF to inspect the request body, WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see Body and JsonBody settings for the FieldToMatch data type.

If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI /logo.jpg is nine characters long.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

field_to_match: Option<FieldToMatch>

The part of the web request that you want WAF to inspect.

comparison_operator: ComparisonOperator

The operator to use to compare the request part to the size setting.

size: i64

The size, in byte, to compare to the request part, after any transformations.

text_transformations: Vec<TextTransformation>

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the FieldToMatch request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

Implementations

impl SizeConstraintStatement

pub fn field_to_match(&self) -> Option<&FieldToMatch>

The part of the web request that you want WAF to inspect.

pub fn comparison_operator(&self) -> &ComparisonOperator

The operator to use to compare the request part to the size setting.

pub fn size(&self) -> i64

The size, in byte, to compare to the request part, after any transformations.

pub fn text_transformations(&self) -> &[TextTransformation]

Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the FieldToMatch request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents.

impl SizeConstraintStatement

pub fn builder() -> SizeConstraintStatementBuilder

Creates a new builder-style object to manufacture SizeConstraintStatement.

Trait Implementations

impl Clone for SizeConstraintStatement

fn clone(&self) -> SizeConstraintStatement

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SizeConstraintStatement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SizeConstraintStatement

fn eq(&self, other: &SizeConstraintStatement) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SizeConstraintStatement