aws cloudfront waf bypass i havent seen anywhere else, if you prepend your payload in the request body with 8kb of data, cloudfront will only inspect that first 8kb of data. @awscloud notes this in documentation, but still see it a lot in the wild.
ref: https://t.co/O2rnxaXS8X