Starting today, AWS WAF supports inspecting the body of incoming requests to protected CloudFront distributions, up to 64KB. The default inspection size of the body of an HTTP/S request has been increased from 8KB to 16KB. This new default will be applied to all new and existing WAF web access control lists, free of charge.
Source:: Amazon AWS