feat(waf): add new check waf_global_webacl_with_rules

[HugoPBrito]

Context

AWS WAF Classic global web ACLs (Web Access Control Lists) are essential for controlling access to web applications. A web ACL can include a set of rules or rule groups that filter and manage HTTP and HTTPS requests. These rules help define which traffic should be allowed, blocked, or counted, improving security and controlling access to your AWS resources such as CloudFront distributions.

Description

This check verifies whether an AWS WAF Classic global web ACL contains at least one rule or rule group. If no rules or rule groups are present, the web traffic might pass without inspection, leaving the application vulnerable to attacks.

Checklist

• Are there new checks included in this PR? Yes.
  • If so, do we need to update permissions for the provider? No.
• Review if the code is being covered by tests.
• Review if code is being documented following this specification https://github.com/google/styleguide/blob/gh-pages/pyguide.md#38-comments-and-docstrings
• Review if backport is needed.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[codecov]

Codecov Report

Attention: Patch coverage is 90.00000% with 9 lines in your changes missing coverage. Please review.

Project coverage is 89.44%. Comparing base (23a20a5) to head (e0ea458).

Files with missing lines	Patch %	Lines
prowler/providers/aws/services/waf/waf_service.py	87.50%	9 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #5469      +/-   ##
==========================================
- Coverage   89.45%   89.44%   -0.01%     
==========================================
  Files        1059     1061       +2     
  Lines       32855    32928      +73     
==========================================
+ Hits        29390    29454      +64     
- Misses       3465     3474       +9     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.