hi everyone. We'd like to add some additional AWS-managed WAF rulesets such as: AWSManagedRulesAnonymousIpList and AWSManagedRulesKnownBadInputsRuleSet but we haven't found any information about that being supported through the Medplum CDK packages. Based on the following document https://medplum-www-git-cody-waf-docs-medplum.vercel.app/security#web-application-security-scanning-nist-sp-500-269 and the [packages/cdk/src/waf.ts](https://github.com/medplum/medplum/blob/main/packages/cdk/src/waf.ts) source code, there doesn't seem to be support for that yet, but we'd like to be sure. Are there any plans to add that to the CDK self-hosted configs? Thanks in advance!

Hi Alejandro! I don't believe there are any plans to add things to our CDK configs. Please feel free to file an issue, and we can discuss adding these rulesets https://github.com/medplum/medplum/issues/new