Field to match | Mondoo Docs

aws.waf.rule.fieldtomatch MQL resource for querying AWS infrastructure with cnquery and cnspec.

AWSPrivate Resource

Field to match

Min version: 9.0.0Defaults: target

Relationships

AWS

16 resources · 20 relationships·Click to select, expand fields to see properties.

Fields (20)

Field	Type	Description
`allQueryArguments`required	int	Whether to match all query arguments
`body`required	aws.waf.rule.fieldtomatch.body	Whether to match the body (match if not null)
`cookie`required	aws.waf.rule.fieldtomatch.cookie	Whether to match the cookie (match if not null)
`headerorder`private	aws.waf.rule.fieldtomatch.headerorder	Order of headers of the field to match
`headerOrder`required	aws.waf.rule.fieldtomatch.headerorder	Whether to match the header order (match if not null)
`headers`required	aws.waf.rule.fieldtomatch.headers	Whether to match the header (match if not null)
`ja3fingerprint`private	aws.waf.rule.fieldtomatch.ja3fingerprint	JA3 fingerprint
`ja3Fingerprint`required	aws.waf.rule.fieldtomatch.ja3fingerprint	Whether to match the JA3 fingerprint (match if not null)
`jsonbody`private	aws.waf.rule.fieldtomatch.jsonbody	Request body as JSON
`jsonBody`required	aws.waf.rule.fieldtomatch.jsonbody	Whether to match the JSON body (match if not null)
`method`required	int	Whether to match the HTTP method: GET or POST
`queryString`required	int	Whether to match the query string
`ruleName`required	string	Name of the rule this statement belongs to
`singleheader`private	aws.waf.rule.fieldtomatch.singleheader	Single header of the field to match
`singleHeader`required	aws.waf.rule.fieldtomatch.singleheader	Whether to match the single header (match if not null)
`singlequeryargument`private	aws.waf.rule.fieldtomatch.singlequeryargument	Single query argument
`singleQueryArgument`required	aws.waf.rule.fieldtomatch.singlequeryargument	Whether to match the single query argument of the field (match if not null)
`statementID`required	string	ID of the statement
`target`required	string	-
`uriPath`required	int	Whether to match the URI path