The problem here is a real one: A lot of people in charge of implementing WAF don't understand what it's all about. That said, this article is describing some

The problem here is a real one: A lot of people in charge of implementing WAF don't understand what it's all about. That said, this article is describing something that you quickly learn studying the WAF offerings on a cloud provider on day 1. For such a complex topic, this is surprisingly remedial to show up here. All that said: there's a lot of dumb shit that ends up being configured in the cloud, and articles like this are good reminders for people to check for dumb shit.