Table: aws_waf_web_acl

select
  name,
  web_acl_id,
  arn,
  region,
  default_action,
  tags
from
  aws_waf_web_acl;

select
  name,
  web_acl_id,
  r ->> 'RuleId' as rule_id,
  r ->> 'Type' as rule_type,
  r ->> 'ExcludedRules' as excluded_rules,
  r ->> 'OverrideAction' as override_action,
  r -> 'Action' ->> 'Type' as action_type
from
  aws_waf_web_acl,
  jsonb_array_elements(rules) as r;

select
  name,
  web_acl_id,
  arn,
  region,
  default_action,
  tags
from
  aws_waf_web_acl
where
  rules is null;

select
  name,
  web_acl_id,
  arn,
  region,
  default_action
from
  aws_waf_web_acl
where
  default_action = 'ALLOW';

select
  name,
  web_acl_id,
  arn,
  region
from
  aws_waf_web_acl
where
  logging_configuration is null;