Amazon simply calls its new security software for its virtual private cloud the AWS Network Firewall. The latter is a logically isolated area of ​​the AWS Cloud in which companies can operate their services in a self-configured virtual network.

With the new firewall, data can be inspected in order, for example, to detect malware in good time before it comes into contact with one’s own subnet. It is a fully Amazon-managed and highly available service that customers can set up with just a few clicks. If necessary, the software scales automatically, without additional costs for the necessary infrastructure.

Rules for the firewall can be defined manually, but they can also be imported from community projects such as Suricata. Furthermore, the AWS Network Firewall integrates with existing security software such as from CrowdStrike, Palo Alto Networks and Splunk. It can also be used and monitored via the AWS Firewall Manager. The logs can also be used directly with S3, CloudWatch and Kinesis Firehose.

The prices depend on the required firewall endpoint and the amount of data generated there. In Europe, the service is available from the Ireland region. Readers can find instructions for setup and the JSON rules in the AWS blog.

(fo)