AWS managed rule groups are designed to protect you from common web threats. When used in accordance
with the documentation, AWS managed rule groups add another layer of security for your
applications. However, AWS managed rule groups aren't intended as a replacement for
your security responsibilities, which are determined by the AWS resources
that you select. Refer to the Shared
Responsibility Model
