AWS WAF adds pre-parse text transformations and new text transformations

AWS WAF Release Notes

AWS WAF now includes pre-parse text transformations for query arguments and ten new text transformations to normalize request content for inspection. These features help close HTTP parameter pollution and parser differential evasion gaps.

Pre-parse transformations normalize raw query strings before AWS WAF parses them into key-value pairs. You can chain up to ten transformations, such as URL decode, Combine Duplicate Query Arguments by Comma, and Replace Semicolons with Ampersands, then apply standard post-parse transformations within a single rule statement.

The new text transformations include industry-standard options like Uppercase, Trim, Remove Whitespace, and SHA256, as well as command line and JavaScript decoding functions.

What to do

• Review the new pre-parse text transformations in the AWS WAF documentation.
• Explore the new text transformations in the AWS WAF documentation.
• Get started with AWS WAF in the AWS WAF documentation.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.