ipset in multiple not statements

[jayolmos]

Description

In some cases you need to define several ipsets in not statements to be allowlists.

Includes in rate_limit and managed_rules the not_statement and ipset statement.

Example in tf plan:

          + statement {
              + managed_rule_group_statement {
                  + name        = "AWSManagedRulesBotControlRuleSet"
                  + vendor_name = "AWS"
                  + scope_down_statement {
                      + and_statement {
                          + statement {
                              + not_statement {
                                  + statement {
                                      + ip_set_reference_statement {
                                          + arn = "REDACTED"
                                        }
                                    }
                                }
                            }
                          + statement {
                              + not_statement {
                                  + statement {
                                      + ip_set_reference_statement {
                                          + arn = "REDACTED"
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            }

[Ohid25]

Thank you for your contribution! This is now in 3.5.0