We would like to test different execution actions on the managed rulesets for different environment such as staging and UAT. However if we narrow down the scope for the managed rulesets to block when selected rules are matched for staging, the other environments like UAT will not have its traffic matched against the managed ruleset.
In this case, would it be appropriate to set a log-all action on the managed ruleset on the account level, and then set the relevant block rules on the zone level?