Hi, I am working on a requirement wherein I have to restrict the incoming requests to Lamba function behind the AWS API Gateway to be less than 800 KB. This needs to implemented preferrably at the Gateway level and need to implement it in Terraform as Infrastructure-as-Code. I am thinking that AWS [WAF SizeConstraint](https://docs.aws.amazon.com/waf/latest/APIReference/API_SizeConstraintStatement.html) might be the answer but looks like it will only inspect up to 4096 bytes and also not sure how to implement a filter that rejects incoming requests greater than 800 KB body size in Terraform. Thanks in Advance

Need to limit AWS API gateway incoming request body size to less than 800 KB

Hi, I am working on a requirement wherein I have to restrict the incoming requests to Lamba function behind the AWS API Gateway to be less than 800 KB. This needs to implemented preferrably at the Gateway level and need to implement it in Terraform as Infrastructure-as-Code. I am thinking that AWS WAF SizeConstraint might be the answer but looks like it will only inspect up to 4096 bytes and also not sure how to implement a filter that rejects incoming requests greater than 800 KB body size in Terraform.

Thanks in Advance

주제

서버리스 보안, 신원 및 규정 준수 프론트엔드 웹 및 모바일 네트워킹 및 콘텐츠 전송

태그

서버리스 AWS WAF 아마존 API 게이트웨이

언어

English

rePost-User-6243945

질문됨 일 년 전478회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

수락된 답변

The SizeConstraint operator is the right thing to use in this case - it looks at the value for the Content-Length header. The limitation on 8192 bytes is only in place if you want WAF to inspect the contents of the request.

전문가

Brettski-AWS

답변함 일 년 전

rePost-User-6243945
일 년 전
Thanks for your @Brettski. I am looking to implement this in Terraform for AWS WAP but there is very little documentation around it. I found a skeleton like this https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/waf_size_constraint_set. Do you know how to implement a request filter condition in Terraform for API Gateway for SizeConstraint to reject request of length over 800KB?
Brettski-AWS 전문가
일 년 전
I'm sorry, I don't know much about Terraform.

Need to limit AWS API gateway incoming request body size to less than 800 KB

관련 콘텐츠