Within the portion of a web request that you want to search (for example, in the query string, if any), specify
where you want AWS WAF to search. Valid values include the following:
CONTAINS
The specified part of the web request must include the value of TargetString
, but the location
doesn't matter.
CONTAINS_WORD
The specified part of the web request must include the value of TargetString
, and
TargetString
must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In
addition, TargetString
must be a word, which means one of the following:
-
TargetString
exactly matches the value of the specified part of the web request, such as the value
of a header.
-
TargetString
is at the beginning of the specified part of the web request and is followed by a
character other than an alphanumeric character or underscore (_), for example, BadBot;
.
-
TargetString
is at the end of the specified part of the web request and is preceded by a character
other than an alphanumeric character or underscore (_), for example, ;BadBot
.
-
TargetString
is in the middle of the specified part of the web request and is preceded and followed
by characters other than alphanumeric characters or underscore (_), for example, -BadBot;
.
EXACTLY
The value of the specified part of the web request must exactly match the value of TargetString
.
STARTS_WITH
The value of TargetString
must appear at the beginning of the specified part of the web request.
ENDS_WITH
The value of TargetString
must appear at the end of the specified part of the web request.