Posture check: AWS CloudFront web distribution with AWS Web Application Firewall (AWS WAF) service disabled
Query: ```config from cloud.resource where cloud.type = 'aws' AND api.name = 'aws-cloudfront-list-distributions' AND json.rule = 'webACLId is empty'```