Questions tagged with AWS Network Firewall
AWS Network Firewall is a managed service that makes it easy to deploy essential network protections for all of your Amazon Virtual Private Clouds (VPCs).
Content language: English
Filter questions
Select tags to filter
Sort by
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
201 results
We are planning a workload migration from AWS to Azure where the source environment needs to remain operational for an extended period while workloads are gradually migrated.
During this transition, w...
KMS's service-principal allowlist in us-gov-west-1 recognizes the GLOBAL form
network-firewall.amazonaws.com but not the REGIONAL form
network-firewall.us-gov-west-1.amazonaws.com. Every CreateGrant e...
We have a centralized inspection setup all inter-VPC traffic goes through Network Firewall via TGW route tables. Works fine but we're inspecting way too much. Internal service-to-service calls betwee...
I have a Lambda function and an EC2 instance in the same VPC subnet. Both use the same security group (which allows all internal traffic). An EC2 instance in the same subnet can connect to the target ...
As per this announcement - [AWS Network Firewall updates default drop action for improved connection reliability](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-network-firewall-updates-defaul...
hello aws people.
I would like to deploy an AWS Network Firewall (NFW) in an environment that currently uses a NAT Gateway and an Application Load Balancer (ALB).
I want to achieve the following traf...
Under what circumstances does CloudFront automatically create a WAF rule named CreatedByCloudFrontForDistributionecccccccccc-Geo-BlockRule regarding geographic restrictions?
We can confirm that we hav...
asked 6 months ago
Problem Statement
When using Cloud WAN Network Function Groups (NFG) with send-via inspection and...
Hello,
We've had NFW up and running in our environment for over a year, and 5 days ago we suddenly started seeing revocation status UNKNOWN (previously OK) for all outbound requests, related to certi...
we are using application runs on eks and access s3 using private endpoint , we use NLB with nginx ingress controller , after we added aws network firewall to protect NLB exposed to the internet based ...
Hello everyone,
We are utilizing Network Firewall in a Multi-AZ deployment. However, the endpoint costs are exceeding $700 per month, which is cost-prohibitive for us at this stage.
Are there any re...
asked 9 months ago
We’ve deployed AWS Network Firewall with the ATD AttackInfrastructure managed rule group in our centralized egress VPC. Our production workloads in spoke VPCs (connected via Transit Gateway) are exper...