Abstract:
When using AWS Managed Rule groups for WAF, sometimes you may need to make exceptions to these rules for certain web requests. This can be done by overriding the Managed Rule group rules to count matches and then creating a custom rule to handle the traffic based on the labels added to the request by the Managed Rule group.Managed Rule groups often add labels to web requests to indicate which rules were matched and provide additional information about the match. By using these labels, you can create more specific rules to handle the labeled traffic and reduce the number of false positives generated by the Managed Rule group