WAF Web ACL (Web Access Control List) is a set of rules that define how AWS WAF inspects web requests and responds to them. It helps protect your web applications from common web exploits and attacks by filtering malicious traffic.