static/Security/200_Automated_Deployment_of_Web_Application_Firewall/Code/waf-global.yaml [79:436]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Description: Enter the name of the value to import, empty value will not create rule
  WAFManualBlacklistUserAgentRule1Action:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFSqlInjectionProtectionParam:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
    Description: >-
      Choose Yes to enable the component designed to block common SQL injection
      attacks.
  WAFSqlInjectionExceptionByteSet1Param:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
  WAFSqlInjectionProtectionAction:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFSqlInjectionExceptionByteSet1Tuple1Type:
    Type: String
    Default: URI
    Description: ''
    AllowedValues:
      - HEADER
      - METHOD
      - QUERY_STRING
      - URI
      - BODY
  WAFSqlInjectionExceptionByteSet1Tuple1String:
    Type: CommaDelimitedList
    Default: '/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,'
    Description: Enter the string that will be excluded from the SQL injection rule, rename the example padding where necessary and ensure there is a total of 10 comma separate values.
  WAFSqlInjectionExceptionByteSet1Tuple1Transform:
    Type: String
    Default: NONE
    Description: ''
    AllowedValues:
      - CMD_LINE
      - COMPRESS_WHITE_SPACE
      - HTML_ENTITY_DECODE
      - LOWERCASE
      - URL_DECODE
      - NONE
  WAFSqlInjectionExceptionByteSet1Tuple1Position:
    Type: String
    Default: CONTAINS
    Description: ''
    AllowedValues:
      - CONTAINS
      - CONTAINS_WORD
      - EXACTLY
      - STARTS_WITH
      - ENDS_WITH
  WAFSqlInjectionExceptionByteSet1Tuple1Data:
    Type: String
    Default: 'User-Agent'
    Description: 'Value of byte match type if set to HEADER'
  WAFXssProtectionParam:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
    Description: Choose Yes to enable the component designed to block common XSS attacks.
  WAFXssExceptionByteSet1Param:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
  WAFXssProtectionAction:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFXssExceptionByteSet1Tuple1Type:
    Type: String
    Default: URI
    Description: ''
    AllowedValues:
      - HEADER
      - METHOD
      - QUERY_STRING
      - URI
      - BODY
  WAFXssExceptionByteSet1Tuple1String:
    Type: CommaDelimitedList
    Default: '/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,'
    Description: Enter the string that will be excluded from the Xss rule, rename the example padding where necessary and ensure there is a total of 10 comma separate values.
  WAFXssExceptionByteSet1Tuple1Transform:
    Type: String
    Default: NONE
    Description: ''
    AllowedValues:
      - CMD_LINE
      - COMPRESS_WHITE_SPACE
      - HTML_ENTITY_DECODE
      - LOWERCASE
      - URL_DECODE
      - NONE
  WAFXssExceptionByteSet1Tuple1Position:
    Type: String
    Default: CONTAINS
    Description: ''
    AllowedValues:
      - CONTAINS
      - CONTAINS_WORD
      - EXACTLY
      - STARTS_WITH
      - ENDS_WITH
  WAFXssExceptionByteSet1Tuple1Data:
    Type: String
    Default: 'User-Agent'
    Description: 'Value of byte match type if set to HEADER'
  WAFSizeProtectionParam:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
    Description: >-
      Choose Yes to enable the component designed to block common overflow
      attacks in URI and Query String.
  WAFSizeExceptionByteSet1Param:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
  WAFSizeProtectionAction:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFSizeURI1:
    Type: String
    Default: '512'
    Description: Maximum size of the URI in bytes (maximum 8192).
  WAFSizeQuery1:
    Type: String
    Default: '512'
    Description: Maximum size of the query string in bytes (maximum 8192).
  WAFSizeCookie1:
    Type: String
    Default: '4096'
    Description: Maximum size of the cookie header in bytes (maximum 4096). The size is determined by the amount of information your web application stores in cookies. If you only pass a session token via cookies, set the size to no larger than the serialized size of the session token and cookie metadata.
  WAFSizeExceptionByteSet1Tuple1Type:
    Type: String
    Default: URI
    Description: ''
    AllowedValues:
      - HEADER
      - METHOD
      - QUERY_STRING
      - URI
      - BODY
  WAFSizeExceptionByteSet1Tuple1String:
    Type: CommaDelimitedList
    Default: '/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,'
    Description: Enter the string that will be excluded from the size limit rule, rename the example padding where necessary and ensure there is a total of 10 comma separate values.
  WAFSizeExceptionByteSet1Tuple1Transform:
    Type: String
    Default: NONE
    Description: ''
    AllowedValues:
      - CMD_LINE
      - COMPRESS_WHITE_SPACE
      - HTML_ENTITY_DECODE
      - LOWERCASE
      - URL_DECODE
      - NONE
  WAFSizeExceptionByteSet1Tuple1Position:
    Type: String
    Default: CONTAINS
    Description: ''
    AllowedValues:
      - CONTAINS
      - CONTAINS_WORD
      - EXACTLY
      - STARTS_WITH
      - ENDS_WITH 
  WAFSizeExceptionByteSet1Tuple1Data:
    Type: String
    Default: 'User-Agent'
    Description: 'Value of byte match type if set to HEADER'
  WAFBlacklistByteSet1ProtectionParam:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
    Description: >-
      Choose Yes to enable the component to block generic byte match strings.
  WAFBlacklistByteSet1ProtectionAction:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFBlacklistByteSet1Tuple1Type:
    Type: String
    Default: HEADER
    Description: ''
    AllowedValues:
      - HEADER
      - METHOD
      - QUERY_STRING
      - URI
      - BODY
  WAFBlacklistByteSet1Tuple1String:
    Type: CommaDelimitedList
    Default: 'pingback,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,'
    Description: Enter the string that will be denied in the byte set 1 rule, additions require updating the relevant byte set, rename the example padding where necessary and ensure there is a total of 10 comma separate values.
  WAFBlacklistByteSet1Tuple1Transform:
    Type: String
    Default: LOWERCASE
    Description: ''
    AllowedValues:
      - CMD_LINE
      - COMPRESS_WHITE_SPACE
      - HTML_ENTITY_DECODE
      - LOWERCASE
      - URL_DECODE
      - NONE
  WAFBlacklistByteSet1Tuple1Position:
    Type: String
    Default: CONTAINS
    Description: ''
    AllowedValues:
      - CONTAINS
      - CONTAINS_WORD
      - EXACTLY
      - STARTS_WITH
      - ENDS_WITH
  WAFBlacklistByteSet1Tuple1Data:
    Type: String
    Default: 'User-Agent'
    Description: 'Value of byte match type if set to HEADER'

Metadata:
  AWS::CloudFormation::Interface:
    ParameterGroups:
      - Label:
          default: "General"
        Parameters:
          - WAFName
          - WAFCloudWatchPrefix
      - Label:
          default: "Blacklists"
        Parameters:
          - WAFManualBlacklistIPRule1Name
          - WAFManualBlacklistIPRule1Action
          - WAFManualBlacklistIPSet1Name
          - WAFManualBlacklistUserAgentRule1Name
          - WAFManualBlacklistUserAgentRule1Action
          - WAFUserAgentBlacklistRule1Name
          - WAFUserAgentBlacklistSet1Name
          - WAFUserAgentByteSet1Tuple1String
          - WAFBlacklistByteSet1ProtectionParam
          - WAFBlacklistByteSet1ProtectionAction
          - WAFBlacklistByteSet1Tuple1Type
          - WAFBlacklistByteSet1Tuple1String
          - WAFBlacklistByteSet1Tuple1Transform
          - WAFBlacklistByteSet1Tuple1Position
          - WAFBlacklistByteSet1Tuple1Data
      - Label:
          default: "SQL Injection Protection"
        Parameters:
          - WAFSqlInjectionProtectionParam
          - WAFSqlInjectionExceptionByteSet1Param
          - WAFSqlInjectionProtectionAction
          - WAFSqlInjectionExceptionByteSet1Tuple1Type
          - WAFSqlInjectionExceptionByteSet1Tuple1String
          - WAFSqlInjectionExceptionByteSet1Tuple1Transform
          - WAFSqlInjectionExceptionByteSet1Tuple1Position
          - WAFSqlInjectionExceptionByteSet1Tuple1Data
      - Label:
          default: "Cross-Site Scripting Protection"
        Parameters:
          - WAFXssProtectionParam
          - WAFXssExceptionByteSet1Param
          - WAFXssProtectionAction
          - WAFXssExceptionByteSet1Tuple1Type
          - WAFXssExceptionByteSet1Tuple1String
          - WAFXssExceptionByteSet1Tuple1Transform
          - WAFXssExceptionByteSet1Tuple1Position
          - WAFXssExceptionByteSet1Tuple1Data
      - Label:
          default: "Size Protection"
        Parameters:
          - WAFSizeProtectionParam
          - WAFSizeExceptionByteSet1Param
          - WAFSizeProtectionAction
          - WAFSizeURI1
          - WAFSizeQuery1
          - WAFSizeCookie1
          - WAFSizeExceptionByteSet1Tuple1Type
          - WAFSizeExceptionByteSet1Tuple1String
          - WAFSizeExceptionByteSet1Tuple1Transform
          - WAFSizeExceptionByteSet1Tuple1Position
          - WAFSizeExceptionByteSet1Tuple1Data
Conditions:
  WAFManualBlacklistIPRule1Activated: !Not
    - !Equals 
      - !Ref WAFManualBlacklistIPRule1Name
      - ''
  WAFManualBlacklistUserAgentRule1Activated: !Not
    - !Equals 
      - !Ref WAFManualBlacklistUserAgentRule1Name
      - ''
  WAFSqlInjectionProtectionActivated: !Equals
    - !Ref WAFSqlInjectionProtectionParam
    - 'Yes'
  WAFSqlInjectionExceptionByteSet1Activated: !Equals
    - !Ref WAFSqlInjectionExceptionByteSet1Param
    - 'Yes'
  WAFSqlInjectionExceptionByteSet1Tuple1TypeHeader: !Equals
    - !Ref WAFSqlInjectionExceptionByteSet1Tuple1Type
    - 'HEADER'
  WAFSizeProtectionActivated: !Equals
    - !Ref WAFSizeProtectionParam
    - 'Yes'
  WAFSizeExceptionByteSet1Activated: !Equals
    - !Ref WAFSizeExceptionByteSet1Param
    - 'Yes'
  WAFSizeExceptionByteSet1Tuple1TypeHeader: !Equals
    - !Ref WAFSizeExceptionByteSet1Tuple1Type
    - 'HEADER'
  WAFXssProtectionActivated: !Equals
    - !Ref WAFXssProtectionParam
    - 'Yes'
  WAFXssExceptionByteSet1Activated: !Equals
    - !Ref WAFXssExceptionByteSet1Param
    - 'Yes'
  WAFXssExceptionByteSet1Tuple1TypeHeader: !Equals
    - !Ref WAFXssExceptionByteSet1Tuple1Type
    - 'HEADER'
  WAFBlacklistByteSet1ProtectionActivated: !Equals
    - !Ref WAFBlacklistByteSet1ProtectionParam
    - 'Yes'
  WAFBlacklistByteSet1Tuple1TypeHeader: !Equals
    - !Ref WAFBlacklistByteSet1Tuple1Type
    - 'HEADER'

Resources:
  WAFManualBlacklistIPSet1:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



static/Security/200_Basic_EC2_with_WAF_Protection/Code/waf-regional.yaml [79:436]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Description: Enter the name of the value to import, empty value will not create rule
  WAFManualBlacklistUserAgentRule1Action:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFSqlInjectionProtectionParam:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
    Description: >-
      Choose Yes to enable the component designed to block common SQL injection
      attacks.
  WAFSqlInjectionExceptionByteSet1Param:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
  WAFSqlInjectionProtectionAction:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFSqlInjectionExceptionByteSet1Tuple1Type:
    Type: String
    Default: URI
    Description: ''
    AllowedValues:
      - HEADER
      - METHOD
      - QUERY_STRING
      - URI
      - BODY
  WAFSqlInjectionExceptionByteSet1Tuple1String:
    Type: CommaDelimitedList
    Default: '/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,'
    Description: Enter the string that will be excluded from the SQL injection rule, rename the example padding where necessary and ensure there is a total of 10 comma separate values.
  WAFSqlInjectionExceptionByteSet1Tuple1Transform:
    Type: String
    Default: NONE
    Description: ''
    AllowedValues:
      - CMD_LINE
      - COMPRESS_WHITE_SPACE
      - HTML_ENTITY_DECODE
      - LOWERCASE
      - URL_DECODE
      - NONE
  WAFSqlInjectionExceptionByteSet1Tuple1Position:
    Type: String
    Default: CONTAINS
    Description: ''
    AllowedValues:
      - CONTAINS
      - CONTAINS_WORD
      - EXACTLY
      - STARTS_WITH
      - ENDS_WITH
  WAFSqlInjectionExceptionByteSet1Tuple1Data:
    Type: String
    Default: 'User-Agent'
    Description: 'Value of byte match type if set to HEADER'
  WAFXssProtectionParam:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
    Description: Choose Yes to enable the component designed to block common XSS attacks.
  WAFXssExceptionByteSet1Param:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
  WAFXssProtectionAction:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFXssExceptionByteSet1Tuple1Type:
    Type: String
    Default: URI
    Description: ''
    AllowedValues:
      - HEADER
      - METHOD
      - QUERY_STRING
      - URI
      - BODY
  WAFXssExceptionByteSet1Tuple1String:
    Type: CommaDelimitedList
    Default: '/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,'
    Description: Enter the string that will be excluded from the Xss rule, rename the example padding where necessary and ensure there is a total of 10 comma separate values.
  WAFXssExceptionByteSet1Tuple1Transform:
    Type: String
    Default: NONE
    Description: ''
    AllowedValues:
      - CMD_LINE
      - COMPRESS_WHITE_SPACE
      - HTML_ENTITY_DECODE
      - LOWERCASE
      - URL_DECODE
      - NONE
  WAFXssExceptionByteSet1Tuple1Position:
    Type: String
    Default: CONTAINS
    Description: ''
    AllowedValues:
      - CONTAINS
      - CONTAINS_WORD
      - EXACTLY
      - STARTS_WITH
      - ENDS_WITH
  WAFXssExceptionByteSet1Tuple1Data:
    Type: String
    Default: 'User-Agent'
    Description: 'Value of byte match type if set to HEADER'
  WAFSizeProtectionParam:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
    Description: >-
      Choose Yes to enable the component designed to block common overflow
      attacks in URI and Query String.
  WAFSizeExceptionByteSet1Param:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
  WAFSizeProtectionAction:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFSizeURI1:
    Type: String
    Default: '512'
    Description: Maximum size of the URI in bytes (maximum 8192).
  WAFSizeQuery1:
    Type: String
    Default: '512'
    Description: Maximum size of the query string in bytes (maximum 8192).
  WAFSizeCookie1:
    Type: String
    Default: '4096'
    Description: Maximum size of the cookie header in bytes (maximum 4096). The size is determined by the amount of information your web application stores in cookies. If you only pass a session token via cookies, set the size to no larger than the serialized size of the session token and cookie metadata.
  WAFSizeExceptionByteSet1Tuple1Type:
    Type: String
    Default: URI
    Description: ''
    AllowedValues:
      - HEADER
      - METHOD
      - QUERY_STRING
      - URI
      - BODY
  WAFSizeExceptionByteSet1Tuple1String:
    Type: CommaDelimitedList
    Default: '/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,'
    Description: Enter the string that will be excluded from the size limit rule, rename the example padding where necessary and ensure there is a total of 10 comma separate values.
  WAFSizeExceptionByteSet1Tuple1Transform:
    Type: String
    Default: NONE
    Description: ''
    AllowedValues:
      - CMD_LINE
      - COMPRESS_WHITE_SPACE
      - HTML_ENTITY_DECODE
      - LOWERCASE
      - URL_DECODE
      - NONE
  WAFSizeExceptionByteSet1Tuple1Position:
    Type: String
    Default: CONTAINS
    Description: ''
    AllowedValues:
      - CONTAINS
      - CONTAINS_WORD
      - EXACTLY
      - STARTS_WITH
      - ENDS_WITH 
  WAFSizeExceptionByteSet1Tuple1Data:
    Type: String
    Default: 'User-Agent'
    Description: 'Value of byte match type if set to HEADER'
  WAFBlacklistByteSet1ProtectionParam:
    Type: String
    Default: 'Yes'
    AllowedValues:
      - 'Yes'
      - 'No'
    Description: >-
      Choose Yes to enable the component to block generic byte match strings.
  WAFBlacklistByteSet1ProtectionAction:
    Type: String
    Default: 'COUNT'
    AllowedValues:
      - 'COUNT'
      - 'BLOCK'
  WAFBlacklistByteSet1Tuple1Type:
    Type: String
    Default: HEADER
    Description: ''
    AllowedValues:
      - HEADER
      - METHOD
      - QUERY_STRING
      - URI
      - BODY
  WAFBlacklistByteSet1Tuple1String:
    Type: CommaDelimitedList
    Default: 'pingback,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,/aaabbbccc111222333,'
    Description: Enter the string that will be denied in the byte set 1 rule, additions require updating the relevant byte set, rename the example padding where necessary and ensure there is a total of 10 comma separate values.
  WAFBlacklistByteSet1Tuple1Transform:
    Type: String
    Default: LOWERCASE
    Description: ''
    AllowedValues:
      - CMD_LINE
      - COMPRESS_WHITE_SPACE
      - HTML_ENTITY_DECODE
      - LOWERCASE
      - URL_DECODE
      - NONE
  WAFBlacklistByteSet1Tuple1Position:
    Type: String
    Default: CONTAINS
    Description: ''
    AllowedValues:
      - CONTAINS
      - CONTAINS_WORD
      - EXACTLY
      - STARTS_WITH
      - ENDS_WITH
  WAFBlacklistByteSet1Tuple1Data:
    Type: String
    Default: 'User-Agent'
    Description: 'Value of byte match type if set to HEADER'

Metadata:
  AWS::CloudFormation::Interface:
    ParameterGroups:
      - Label:
          default: "General"
        Parameters:
          - WAFName
          - WAFCloudWatchPrefix
      - Label:
          default: "Blacklists"
        Parameters:
          - WAFManualBlacklistIPRule1Name
          - WAFManualBlacklistIPRule1Action
          - WAFManualBlacklistIPSet1Name
          - WAFManualBlacklistUserAgentRule1Name
          - WAFManualBlacklistUserAgentRule1Action
          - WAFUserAgentBlacklistRule1Name
          - WAFUserAgentBlacklistSet1Name
          - WAFUserAgentByteSet1Tuple1String
          - WAFBlacklistByteSet1ProtectionParam
          - WAFBlacklistByteSet1ProtectionAction
          - WAFBlacklistByteSet1Tuple1Type
          - WAFBlacklistByteSet1Tuple1String
          - WAFBlacklistByteSet1Tuple1Transform
          - WAFBlacklistByteSet1Tuple1Position
          - WAFBlacklistByteSet1Tuple1Data
      - Label:
          default: "SQL Injection Protection"
        Parameters:
          - WAFSqlInjectionProtectionParam
          - WAFSqlInjectionExceptionByteSet1Param
          - WAFSqlInjectionProtectionAction
          - WAFSqlInjectionExceptionByteSet1Tuple1Type
          - WAFSqlInjectionExceptionByteSet1Tuple1String
          - WAFSqlInjectionExceptionByteSet1Tuple1Transform
          - WAFSqlInjectionExceptionByteSet1Tuple1Position
          - WAFSqlInjectionExceptionByteSet1Tuple1Data
      - Label:
          default: "Cross-Site Scripting Protection"
        Parameters:
          - WAFXssProtectionParam
          - WAFXssExceptionByteSet1Param
          - WAFXssProtectionAction
          - WAFXssExceptionByteSet1Tuple1Type
          - WAFXssExceptionByteSet1Tuple1String
          - WAFXssExceptionByteSet1Tuple1Transform
          - WAFXssExceptionByteSet1Tuple1Position
          - WAFXssExceptionByteSet1Tuple1Data
      - Label:
          default: "Size Protection"
        Parameters:
          - WAFSizeProtectionParam
          - WAFSizeExceptionByteSet1Param
          - WAFSizeProtectionAction
          - WAFSizeURI1
          - WAFSizeQuery1
          - WAFSizeCookie1
          - WAFSizeExceptionByteSet1Tuple1Type
          - WAFSizeExceptionByteSet1Tuple1String
          - WAFSizeExceptionByteSet1Tuple1Transform
          - WAFSizeExceptionByteSet1Tuple1Position
          - WAFSizeExceptionByteSet1Tuple1Data
Conditions:
  WAFManualBlacklistIPRule1Activated: !Not
    - !Equals 
      - !Ref WAFManualBlacklistIPRule1Name
      - ''
  WAFManualBlacklistUserAgentRule1Activated: !Not
    - !Equals 
      - !Ref WAFManualBlacklistUserAgentRule1Name
      - ''
  WAFSqlInjectionProtectionActivated: !Equals
    - !Ref WAFSqlInjectionProtectionParam
    - 'Yes'
  WAFSqlInjectionExceptionByteSet1Activated: !Equals
    - !Ref WAFSqlInjectionExceptionByteSet1Param
    - 'Yes'
  WAFSqlInjectionExceptionByteSet1Tuple1TypeHeader: !Equals
    - !Ref WAFSqlInjectionExceptionByteSet1Tuple1Type
    - 'HEADER'
  WAFSizeProtectionActivated: !Equals
    - !Ref WAFSizeProtectionParam
    - 'Yes'
  WAFSizeExceptionByteSet1Activated: !Equals
    - !Ref WAFSizeExceptionByteSet1Param
    - 'Yes'
  WAFSizeExceptionByteSet1Tuple1TypeHeader: !Equals
    - !Ref WAFSizeExceptionByteSet1Tuple1Type
    - 'HEADER'
  WAFXssProtectionActivated: !Equals
    - !Ref WAFXssProtectionParam
    - 'Yes'
  WAFXssExceptionByteSet1Activated: !Equals
    - !Ref WAFXssExceptionByteSet1Param
    - 'Yes'
  WAFXssExceptionByteSet1Tuple1TypeHeader: !Equals
    - !Ref WAFXssExceptionByteSet1Tuple1Type
    - 'HEADER'
  WAFBlacklistByteSet1ProtectionActivated: !Equals
    - !Ref WAFBlacklistByteSet1ProtectionParam
    - 'Yes'
  WAFBlacklistByteSet1Tuple1TypeHeader: !Equals
    - !Ref WAFBlacklistByteSet1Tuple1Type
    - 'HEADER'

Resources:
  WAFManualBlacklistIPSet1:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



