Rule
A single rule, which you can use in a WebACL or RuleGroup to identify web requests that you want to manage in some way. Each rule includes one top-level Statement that WAF uses to identify matching web requests, and parameters that govern how WAF handles them.
Types
Properties
The action that WAF should take on a web request when it matches the rule statement. Settings at the web ACL level can override the rule action setting.
Specifies how WAF should handle CAPTCHA
evaluations. If you don't specify this, WAF uses the CAPTCHA
configuration that's defined for the web ACL.
Specifies how WAF should handle Challenge
evaluations. If you don't specify this, WAF uses the challenge configuration that's defined for the web ACL.
The action to use in the place of the action that results from the rule group evaluation. Set the override action to none to leave the result of the rule group alone. Set it to count to override the result to count only.
Labels to apply to web requests that match the rule match statement. WAF applies fully qualified labels to matching web requests. A fully qualified label is the concatenation of a label namespace and a rule label. The rule's rule group or web ACL defines the label namespace.
Defines and enables Amazon CloudWatch metrics and web request sample collection.