The web ACL that is associated with the resource. If there is no associated resource, WAF returns a null web ACL.