Assigning a WAF Web ACL to CloudFront distributions