CustomProtectionRule

class oci.waas.models.CustomProtectionRule(**kwargs)

Bases: object

The details of a Custom Protection rule.

LIFECYCLE_STATE_ACTIVE = 'ACTIVE'

A constant which can be used with the lifecycle_state property of a CustomProtectionRule. This constant has a value of "ACTIVE"

LIFECYCLE_STATE_CREATING = 'CREATING'

A constant which can be used with the lifecycle_state property of a CustomProtectionRule. This constant has a value of "CREATING"

LIFECYCLE_STATE_DELETED = 'DELETED'

A constant which can be used with the lifecycle_state property of a CustomProtectionRule. This constant has a value of "DELETED"

LIFECYCLE_STATE_DELETING = 'DELETING'

A constant which can be used with the lifecycle_state property of a CustomProtectionRule. This constant has a value of "DELETING"

LIFECYCLE_STATE_FAILED = 'FAILED'

A constant which can be used with the lifecycle_state property of a CustomProtectionRule. This constant has a value of "FAILED"

LIFECYCLE_STATE_UPDATING = 'UPDATING'

A constant which can be used with the lifecycle_state property of a CustomProtectionRule. This constant has a value of "UPDATING"

__init__(**kwargs)

Initializes a new CustomProtectionRule object with values from keyword arguments. The following keyword arguments are supported (corresponding to the getters/setters of this class):

Parameters:
  • id (str) -- The value to assign to the id property of this CustomProtectionRule.
  • compartment_id (str) -- The value to assign to the compartment_id property of this CustomProtectionRule.
  • display_name (str) -- The value to assign to the display_name property of this CustomProtectionRule.
  • description (str) -- The value to assign to the description property of this CustomProtectionRule.
  • mod_security_rule_ids (list[str]) -- The value to assign to the mod_security_rule_ids property of this CustomProtectionRule.
  • template (str) -- The value to assign to the template property of this CustomProtectionRule.
  • lifecycle_state (str) -- The value to assign to the lifecycle_state property of this CustomProtectionRule. Allowed values for this property are: "CREATING", "ACTIVE", "FAILED", "UPDATING", "DELETING", "DELETED", 'UNKNOWN_ENUM_VALUE'. Any unrecognized values returned by a service will be mapped to 'UNKNOWN_ENUM_VALUE'.
  • time_created (datetime) -- The value to assign to the time_created property of this CustomProtectionRule.
  • freeform_tags (dict(str, str)) -- The value to assign to the freeform_tags property of this CustomProtectionRule.
  • defined_tags (dict(str, dict(str, object))) -- The value to assign to the defined_tags property of this CustomProtectionRule.
compartment_id

Gets the compartment_id of this CustomProtectionRule. The OCID of the Custom Protecion rule's compartment.

Returns:The compartment_id of this CustomProtectionRule.
Return type:str
defined_tags

Gets the defined_tags of this CustomProtectionRule. Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.

Example: {"Operations": {"CostCenter": "42"}}

Returns:The defined_tags of this CustomProtectionRule.
Return type:dict(str, dict(str, object))
description

Gets the description of this CustomProtectionRule. The description of the Custom Protection rule.

Returns:The description of this CustomProtectionRule.
Return type:str
display_name

Gets the display_name of this CustomProtectionRule. The user-friendly name of the Custom Protecion rule.

Returns:The display_name of this CustomProtectionRule.
Return type:str
freeform_tags

Gets the freeform_tags of this CustomProtectionRule. Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.

Example: {"Department": "Finance"}

Returns:The freeform_tags of this CustomProtectionRule.
Return type:dict(str, str)
id

Gets the id of this CustomProtectionRule. The OCID of the Custom Protecion rule.

Returns:The id of this CustomProtectionRule.
Return type:str
lifecycle_state

Gets the lifecycle_state of this CustomProtectionRule. The current lifecycle state of the Custom Protection rule.

Allowed values for this property are: "CREATING", "ACTIVE", "FAILED", "UPDATING", "DELETING", "DELETED", 'UNKNOWN_ENUM_VALUE'. Any unrecognized values returned by a service will be mapped to 'UNKNOWN_ENUM_VALUE'.

Returns:The lifecycle_state of this CustomProtectionRule.
Return type:str
mod_security_rule_ids

Gets the mod_security_rule_ids of this CustomProtectionRule. The list of the ModSecurity rule IDs that apply to this protection rule. For more information about ModSecurity's open source WAF rules, see Mod Security's documentation.

Returns:The mod_security_rule_ids of this CustomProtectionRule.
Return type:list[str]
template

Gets the template of this CustomProtectionRule. The template text of the Custom Protection rule. The syntax is based on ModSecurity Rule Language. Additionaly it needs to include two variables / placeholders which will be replaced during publishing.

  • {{mode}} - rule action, defined by user in UI, like OFF, DETECT or BLOCK.
  • {{id_1}} - unique rule ID which identifies a SecRule, generated by the system. Multiple IDs can be used by increasing the number of the variable for every SecRule defined in the template.
Example usage:

``` SecRule REQUEST_COOKIES "regex matching SQL injection - part 1/2"

"phase:2, msg:'Detects chained SQL injection attempts 1/2.', id: {{id_1}}, ctl:ruleEngine={{mode}}, deny"
SecRule REQUEST_COOKIES "regex matching SQL injection - part 2/2"
"phase:2, msg:'Detects chained SQL injection attempts 2/2.', id: {{id_2}}, ctl:ruleEngine={{mode}}, deny"

``` The example contains two SecRules each having distinct regex expression to match Cookie header value during second input analysis phase. The disruptive deny action takes effect only when {{mode}} is set to BLOCK. The message is logged either when {{mode}} is set to DETECT or BLOCK.

For more information about ModSecurity's open source WAF rules, see Mod Security's documentation.

Returns:The template of this CustomProtectionRule.
Return type:str
time_created

Gets the time_created of this CustomProtectionRule. The date and time the protection rule was created, expressed in RFC 3339 timestamp format.

Returns:The time_created of this CustomProtectionRule.
Return type:datetime