Configuring AWS WAF rule groups to stop OWASP Top 10 attacks without blocking legitimate traffic.