Since Amazon WAF is supported for ALBs in many regions it appears that I can just activate a WAF for my rack and it will start working.
Is there any reason not to?
It looks like a single WAF will apply to the whole rack, but beyond that I don’t think there should be any other real issues.