{"id":"apigw-waf-associated-per-stage","text":"WAF web ACL association with API Gateway is per API stage, not per API — different stages can have different web ACLs, and only Regional web ACLs (not CloudFront-scoped) work with API Gateway.","truth_value":"IN","source":"entries/2026/03/11/apigateway-latest-developerguide-apigateway-control-access-aws-wafhtml.md","source_url":"","source_hash":"49aaeca05641b725","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"apigw-waf-associated-per-stage","truth_value":"IN","reason":"premise"}]}}