Struct ResponseInspection

#[non_exhaustive]
pub struct ResponseInspection {
    pub status_code: Option<ResponseInspectionStatusCode>,
    pub header: Option<ResponseInspectionHeader>,
    pub body_contains: Option<ResponseInspectionBodyContains>,
    pub json: Option<ResponseInspectionJson>,
}

The criteria for inspecting responses to login requests and account creation requests, used by the ATP and ACFP rule groups to track login and account creation success and failure rates.

Response inspection is available only in web ACLs that protect Amazon CloudFront distributions.

The rule groups evaluates the responses that your protected resources send back to client login and account creation attempts, keeping count of successful and failed attempts from each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses with too much suspicious activity in a short amount of time.

This is part of the AWSManagedRulesATPRuleSet and AWSManagedRulesACFPRuleSet configurations in ManagedRuleGroupConfig.

Enable response inspection by configuring exactly one component of the response to inspect, for example, Header or StatusCode. You can't configure more than one component for inspection. If you don't configure any of the response inspection options, response inspection is disabled.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

status_code: Option<ResponseInspectionStatusCode>

Configures inspection of the response status code for success and failure indicators.

header: Option<ResponseInspectionHeader>

Configures inspection of the response header for success and failure indicators.

body_contains: Option<ResponseInspectionBodyContains>

Configures inspection of the response body for success and failure indicators. WAF can inspect the first 65,536 bytes (64 KB) of the response body.

json: Option<ResponseInspectionJson>

Configures inspection of the response JSON for success and failure indicators. WAF can inspect the first 65,536 bytes (64 KB) of the response JSON.

Implementations

impl ResponseInspection

pub fn status_code(&self) -> Option<&ResponseInspectionStatusCode>

Configures inspection of the response status code for success and failure indicators.

pub fn header(&self) -> Option<&ResponseInspectionHeader>

Configures inspection of the response header for success and failure indicators.

pub fn body_contains(&self) -> Option<&ResponseInspectionBodyContains>

Configures inspection of the response body for success and failure indicators. WAF can inspect the first 65,536 bytes (64 KB) of the response body.

pub fn json(&self) -> Option<&ResponseInspectionJson>

Configures inspection of the response JSON for success and failure indicators. WAF can inspect the first 65,536 bytes (64 KB) of the response JSON.

impl ResponseInspection

pub fn builder() -> ResponseInspectionBuilder

Creates a new builder-style object to manufacture ResponseInspection.

Trait Implementations

impl Clone for ResponseInspection

fn clone(&self) -> ResponseInspection

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResponseInspection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ResponseInspection

fn eq(&self, other: &ResponseInspection) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ResponseInspection