AwsManagedRulesAtpRuleSet
Details for your use of the account takeover prevention managed rule group, AWSManagedRulesATPRuleSet
. This configuration is used in ManagedRuleGroupConfig
.
For additional information about this and the other intelligent threat mitigation rule groups, see Intelligent threat mitigation in WAF and Amazon Web Services Managed Rules rule groups list in the WAF Developer Guide.
Types
Properties
Allow the use of regular expressions in the login page path.
The path of the login endpoint for your application. For example, for the URL https://example.com/web/login
, you would provide the path /web/login
. Login paths that start with the path that you provide are considered a match. For example /web/login
matches the login paths /web/login
, /web/login/
, /web/loginPage
, and /web/login/thisPage
, but doesn't match the login path /home/web/login
or /website/login
.
The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage.
The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates.