Using Identity-based Policies (IAM Policies) for AWS WAF Classic