aws_waf_regex_match_set

Provides a WAF Regex Match Set Resource

Example Usage

resource "aws_waf_regex_match_set" "example" {
  name = "example"
  regex_match_tuple {
    field_to_match {
      data = "User-Agent"
      type = "HEADER"
    }
    regex_pattern_set_id = "${aws_waf_regex_pattern_set.example.id}"
    text_transformation = "NONE"
  }
}

resource "aws_waf_regex_pattern_set" "example" {
  name = "example"
  regex_pattern_strings = ["one", "two"]
}

Argument Reference

The following arguments are supported:

• name - (Required) The name or description of the Regex Match Set.
• regex_match_tuple - (Required) The regular expression pattern that you want AWS WAF to search for in web requests, the location in requests that you want AWS WAF to search, and other settings. See below.

Nested Arguments

regex_match_tuple

• field_to_match - (Required) The part of a web request that you want to search, such as a specified header or a query string.
• regex_pattern_set_id - (Required) The ID of a Regex Pattern Set.
• text_transformation - (Required) Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF. e.g. CMD_LINE, HTML_ENTITY_DECODE or NONE. See docs for all supported values.

field_to_match

• data - (Optional) When type is HEADER, enter the name of the header that you want to search, e.g. User-Agent or Referer. If type is any other value, omit this field.
• type - (Required) The part of the web request that you want AWS WAF to search for a specified string. e.g. HEADER, METHOD or BODY. See docs for all supported values.

Attributes Reference

In addition to all arguments above, the following attributes are exported:

• id - The ID of the WAF Regex Match Set.