Add support for cookie matching (#92)

umotif-public · Mar 22, 2023 · 157e33b · 157e33b
1 parent 92bdd66
commit 157e33b
Show file tree

Hide file tree

Showing 2 changed files with 853 additions and 0 deletions.
diff --git a/examples/wafv2-bytematch-rules/main.tf b/examples/wafv2-bytematch-rules/main.tf
@@ -126,6 +126,31 @@ module "waf" {
         type                  = "LOWERCASE" # The text transformation type
       }
 
+      visibility_config = {
+        cloudwatch_metrics_enabled = false
+        sampled_requests_enabled   = false
+      }
+    },
+    {
+      # Blocks a single user by checking the username header
+      name     = "block-cookie"
+      priority = "6"
+      action   = "block"
+
+      byte_match_statement = {
+        field_to_match = {
+          cookies = {
+            match_pattern = {
+              "all" = {}
+            }
+          }
+        }
+        positional_constraint = "CONTAINS"
+        search_string         = "cookie"
+        priority              = 0
+        type                  = "NONE" # The text transformation type
+      }
+
       visibility_config = {
         cloudwatch_metrics_enabled = false
         sampled_requests_enabled   = false