In the old WAF I can define a rule and then use it in different WebACLs like this:
HasAutorization: Type: "AWS::WAFRegional::ByteMatchSet" Properties: