AWS Managed Rules disclaimer
AWS Managed Rules are designed to protect you from common web threats. When used in
accordance
with the documentation, AWS Managed Rules rule groups add another layer of security
for your
applications. However, AWS Managed Rules rule groups aren't intended as a replacement
for
your security responsibilities, which are determined by the AWS resources
that you select. Refer to the Shared
Responsibility Model