Can you discuss your experience with configuring AWS WAF and how it contributes to security?