Control: WAF global web ACL should have at least one rule or rule group

This control is from a mod dependency: