github.com/nathanielks/terraform@v0.6.1-0.20170509030759-13e1a62319dc/website/source/docs/providers/aws/r/waf_xss_match_set.html.markdown (about)

     1  ---
     2  layout: "aws"
     3  page_title: "AWS: waf_xss_match_set"
     4  sidebar_current: "docs-aws-resource-waf-xss-match-set"
     5  description: |-
     6    Provides a AWS WAF XssMatchSet resource.
     7  ---
     8  
     9  # aws\_waf\_xss\_match\_set
    10  
    11  Provides a WAF XSS Match Set Resource
    12  
    13  ## Example Usage
    14  
    15  ```hcl
    16  resource "aws_waf_xss_match_set" "xss_match_set" {
    17    name = "xss_match_set"
    18  
    19    xss_match_tuples {
    20      text_transformation = "NONE"
    21  
    22      field_to_match {
    23        type = "URI"
    24      }
    25    }
    26  
    27    xss_match_tuples {
    28      text_transformation = "NONE"
    29  
    30      field_to_match {
    31        type = "QUERY_STRING"
    32      }
    33    }
    34  }
    35  ```
    36  
    37  ## Argument Reference
    38  
    39  The following arguments are supported:
    40  
    41  * `name` - (Required) The name or description of the SizeConstraintSet.
    42  * `xss_match_tuples` - (Optional) The parts of web requests that you want to inspect for cross-site scripting attacks.
    43  
    44  ## Nested Blocks
    45  
    46  ### `xss_match_tuples`
    47  
    48  * `field_to_match` - (Required) Specifies where in a web request to look for cross-site scripting attacks.
    49  * `text_transformation` - (Required) Text transformations used to eliminate unusual formatting that attackers use in web requests in an effort to bypass AWS WAF.
    50    If you specify a transformation, AWS WAF performs the transformation on `target_string` before inspecting a request for a match.
    51    e.g. `CMD_LINE`, `HTML_ENTITY_DECODE` or `NONE`.
    52    See [docs](http://docs.aws.amazon.com/waf/latest/APIReference/API_XssMatchTuple.html#WAF-Type-XssMatchTuple-TextTransformation)
    53    for all supported values.
    54  
    55  ### `field_to_match`
    56  
    57  #### Arguments
    58  
    59  * `data` - (Optional) When `type` is `HEADER`, enter the name of the header that you want to search, e.g. `User-Agent` or `Referer`.
    60    If `type` is any other value, omit this field.
    61  * `type` - (Required) The part of the web request that you want AWS WAF to search for a specified string.
    62    e.g. `HEADER`, `METHOD` or `BODY`.
    63    See [docs](http://docs.aws.amazon.com/waf/latest/APIReference/API_FieldToMatch.html)
    64    for all supported values.
    65  
    66  
    67  ## Remarks
    68  
    69  ## Attributes Reference
    70  
    71  The following attributes are exported:
    72  
    73  * `id` - The ID of the WAF XssMatchSet.