MDAA TS Docs
    Preparing search index...

    Interface PerUserRateLimitConfig

    Per-user rate limiting configuration.

    Adds a second rate-based rule that aggregates request counts on the value of the authorization header (the Cognito-issued bearer token) rather than on source IP. This enforces a per-principal limit that survives distributed clients or shared NAT — the scenario where many users share one egress IP, or one abusive client spreads requests across many IPs. Only applied for REGIONAL scope (API Gateway); CloudFront-scoped WAFs front the UI where this header is not present.

    https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-rate-based-aggregate-keys.html

    interface PerUserRateLimitConfig {
        enabled?: boolean;
        evaluationWindowSec?: 600 | 300 | 60 | 120;
        limit?: number;
        priority?: number;
    }
    Index

    Properties

    enabled? evaluationWindowSec? limit? priority?

    Properties

    enabled?: boolean

    Whether per-user (Authorization header) rate limiting is enabled. Has effect only on REGIONAL-scoped WAFs.

    true
    evaluationWindowSec?: 600 | 300 | 60 | 120

    Time window in seconds for counting per-user requests.

    60 (1 minute)

    60, 120, 300, 600

    limit?: number

    Maximum requests allowed per distinct authorization header value within the evaluation window. When exceeded, requests bearing that token are blocked until the rate drops below the limit.

    600

    10

    2000000000

    priority?: number

    Priority for the per-user rate limit rule in the WAF rule evaluation order. Must be unique across all rules and is reserved by default.

    1

    Settings

    Member Visibility

    On This Page

    Properties