Specifies the action that CloudFront or WAF takes when a web request matches the conditions in the rule.