By using AWS re:Post, you agree to the Terms of Use

Can AWS Network Firewall allow traffic from an instance using its tags or some other metadata

0

Can AWS Network Firewall allow traffic from an instance using its tags or some other metadata? Use case: We have an instance in the same subnets as the other instances. We want that instance to access a smaller list of allowed targets (outbound internet domains or only allow that instance to access a target and not the other instances within the same subnets

1 Answer
3
Accepted Answer

AWS Firewall does not currently support using tags or other metadata. These are your available rule groups that you can create https://docs.aws.amazon.com/network-firewall/latest/developerguide/rule-groups.html.

In addition AWS firewall can't inspect instances within the same subnet https://aws.amazon.com/blogs/aws/inspect-subnet-to-subnet-traffic-with-amazon-vpc-more-specific-routing/

Here are some good deployment models for AWS Firewall https://aws.amazon.com/blogs/networking-and-content-delivery/deployment-models-for-aws-network-firewall-with-vpc-routing-enhancements/

answered 8 months ago
profile picture
EXPERT
reviewed 8 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions