Skip to main content

Network Firewall

The Network Firewall is a managed service provided by AWS that makes it easier to deploy essential network protections for all of your Amazon Virtual Private Clouds (VPCs). It provides various security features such as firewall rules, traffic monitoring, and control to protect your AWS workload. More information about the AWS Network Firewall can be found in the official AWS documentation.

Terraform Mappings:

  • aws_networkfirewall_firewall.name

Supported Methods​

  • GET: Get a Network Firewall by name
  • LIST: List Network Firewalls
  • SEARCH: Search for Network Firewalls by ARN

network-firewall-firewall-policy​

The Network Firewall Firewall Policy defines the set of rules and rule groups that are used by a Network Firewall to filter and monitor traffic. Each firewall is associated with a specific firewall policy.

ec2-subnet​

A Network Firewall is deployed within an EC2 subnet. The subnet provides the network infrastructure for the firewall instances and defines the IP range that the firewall will manage.

ec2-vpc​

The Network Firewall operates within a Virtual Private Cloud (VPC), using it as the networking environment where traffic is managed and controlled by the firewall's rules and configurations.

s3-bucket​

AWS Network Firewall logs can be stored in S3 buckets for long-term storage and analysis. This allows administrators to retrieve and review traffic logs and alerts generated by the firewall.

iam-policy​

IAM Policies are used to manage access to the Network Firewall resources. They define who can create, modify or delete firewall configurations and view logs and monitoring data.

kms-key​

KMS keys may be used to encrypt sensitive data processed by the Network Firewall. The service integrates with AWS Key Management Service (KMS) to manage encryption keys for extra security.