Moving From a Managed WAF to One We Actually Owned

The Problem We were running a managed WAF. Every firewall rule change went through a vendor support ticket. For a team with active internal software development, that meant every deployment had a gate