How AWS WAF Processes a Web ACL