Hi, I am working on a requirement wherein I have to restrict the incoming requests to Lamba function behind the AWS API Gateway to be less than 800 KB. This needs to implemented preferrably at the Gateway level and need to implement it in Terraform as Infrastructure-as-Code. I am thinking that AWS [WAF SizeConstraint](https://docs.aws.amazon.com/waf/latest/APIReference/API_SizeConstraintStatement.html) might be the answer but looks like it will only inspect up to 4096 bytes and also not sure how to implement a filter that rejects incoming requests greater than 800 KB body size in Terraform. Thanks in Advance

Need to limit AWS API gateway incoming request body size to less than 800 KB

Hi, I am working on a requirement wherein I have to restrict the incoming requests to Lamba function behind the AWS API Gateway to be less than 800 KB. This needs to implemented preferrably at the Gateway level and need to implement it in Terraform as Infrastructure-as-Code. I am thinking that AWS WAF SizeConstraint might be the answer but looks like it will only inspect up to 4096 bytes and also not sure how to implement a filter that rejects incoming requests greater than 800 KB body size in Terraform.

Thanks in Advance

Sujets

Sans serveur Sécurité, identité et conformité Web et mobile front-end Réseaux et diffusion de contenu

Balises

Sans serveur AWS WAF Passerelle API Amazon

Langue

English

rePost-User-6243945

demandé il y a un an478 vues

1 réponse

Le plus récent
Le plus de votes
La plupart des commentaires

Réponse acceptée

The SizeConstraint operator is the right thing to use in this case - it looks at the value for the Content-Length header. The limitation on 8192 bytes is only in place if you want WAF to inspect the contents of the request.

EXPERT

Brettski-AWS

répondu il y a un an

rePost-User-6243945
il y a un an
Thanks for your @Brettski. I am looking to implement this in Terraform for AWS WAP but there is very little documentation around it. I found a skeleton like this https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/waf_size_constraint_set. Do you know how to implement a request filter condition in Terraform for API Gateway for SizeConstraint to reject request of length over 800KB?
Brettski-AWS EXPERT
il y a un an
I'm sorry, I don't know much about Terraform.

Contenus pertinents

the logon attempt failed
rePost-User-7377810
demandé il y a un an
[ACTION REQUIRED] Update your TLS connections to 1.2 : quelles applications sont concernées ?
rePost-User-7550145
demandé il y a un an
Memory limit for Lambda
plesaint
demandé il y a 6 mois
error 403 / cloud front
nico-HPF
demandé il y a 2 mois
Comment résoudre l’erreur « [AWS service] was unable to place a task because no container instance met all of its requirements » rencontrée dans Amazon ECS ?
AWS OFFICIELA mis à jour il y a un an
Comment résoudre l'erreur « The final policy size is bigger than the limit » de Lambda ?
AWS OFFICIELA mis à jour il y a 2 ans
Comment résoudre l'erreur « CloudFront wasn't able to connect to the origin » (« CloudFront n'a pas pu se connecter à l'origine ») ?
AWS OFFICIELA mis à jour il y a 2 ans
Comment résoudre l'erreur AWS Glue « The specified subnet does not have enough free addresses to satisfy the request » (Le sous-réseau spécifié ne dispose pas de suffisamment d'adresses libres pour répondre à la requête) ?
AWS OFFICIELA mis à jour il y a 2 ans