As far as we know, the AWS WAF "Core rule set (CRS) managed rule group" is not based on the OWASP CRS. (If anyone from AWS is reading this and knows otherwise, please reach out to us.)
This needs to be stated to avoid anyone getting confused and thinking the AWS CRS is the actual CRS.
As far as we know, the AWS WAF "Core rule set (CRS) managed rule group" is not based on the OWASP CRS. (If anyone from AWS is reading this and knows otherwise, please reach out to us.)
This needs to be stated to avoid anyone getting confused and thinking the AWS CRS is the actual CRS.