Really?
> Limits:
> Web ACLs per AWS account: 10
> Rules per AWS account: 50
> Conditions per AWS account: 50
> IP address ranges (in CIDR notation) per IP match condition: 1000
Huh? Is this really intended for production, with such low arbitrary limits?