How does AWS WAF determine its rule groups?

Hope this documentation clarifies. Few links below, but worth looking at the WAF documentation broadly to better understand - https://aws.amazon.com/waf/features/ https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-processing.html https://docs.aws.amazon.com/waf/latest/developerguide/web-request-body-inspection.html https://docs.aws.amazon.com/waf/latest/developerguide/waf-referenced-set-managing.html

Hello leveler,

Well though I didn't see any document from AWS specifically, but I assume it might use both combinations using headers and IP range.

Regards, CK