Here\'s the web ACL definition I\'m using in json format. I\'m blocking all traffic by default, then added 1 rule to allow traffic from a small range of IPs
{ &