Class: Aws::WAFV2::Types::JA3Fingerprint

Inherits:
Struct
  • Object
show all
Includes:
Structure
Defined in:
lib/aws-sdk-wafv2/types.rb

Overview

Available for use with Amazon CloudFront distributions and Application Load Balancers. Match against the request’s JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client’s TLS configuration. WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.

<note markdown=“1”> You can use this choice only with a string match ‘ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY`.

</note>

You can obtain the JA3 fingerprint for client requests from the web ACL logs. If WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields] in the *WAF Developer Guide*.

Provide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration.

[1]: docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#fallback_behavior ⇒ String

The match status to assign to the web request if the request doesn’t have a JA3 fingerprint.

You can specify the following fallback behaviors:

  • ‘MATCH` - Treat the web request as matching the rule statement. WAF applies the rule action to the request.

  • ‘NO_MATCH` - Treat the web request as not matching the rule statement.

Returns:

  • (String) 


4065
4066
4067
4068
4069
 
# File 'lib/aws-sdk-wafv2/types.rb', line 4065

class JA3Fingerprint < Struct.new(
  :fallback_behavior)
  SENSITIVE = []
  include Aws::Structure
end