WAF Association

Apparently you can also associate WAF with API Gateway so this makes 3 possible associations:

• API Gateway API

• CloudFront distribution

• Application Load Balancer

https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-associating-cloudfront-distribution.html