modsec
Something commercial that was bought by a ciso or security person who has no common sense, that asks to specifically be configured with access to that much data.
That's my bet.
Why a WAF role needed so much access to data is something that's hard to explain, and would suggest a major fuckup by the teams involved.