A single condition that can match based on WAF rule action or label name.
Matches log records based on the WAF rule action taken (ALLOW, BLOCK, COUNT, etc.).
Matches log records based on WAF rule labels applied to the request.