Use of AWS Network Security Manager – Hourly charge per account per region where Network Security Manager policies are created. 

Assets protected by AWS Network Security Manager-controlled firewalls – Hourly charges per asset per region per protecting firewall. Assets include Application Load Balancers, API Gateways, and CloudFront Distribution Networks.   

You only pay for what you use, as there are no minimum charges and no upfront commitments. It is important to note that the act of deployment in AWS Network Security Manager creates firewall protections which will incur costs. Please visit the pricing pages for the appropriate security service to calculate those costs. 

Let’s assume you created a new protection policy for an organization using an AWS WAF WebACL with 1 AWS Account. You apply the WebACL to protect 4 Application Load Balancers. 

• AWS Network Security Manager – Usage charges of $0.35 an hour for use of the product across 1 account where policies are created. 
• AWS Network Security Manager – Protected Asset charges for 4 AWS Application Load Balancers for $0.004 an hour each, protected by a single AWS WAF WebACL. 

At the end of the month your total charges will be $263.52 for a full month. $252 for the use of AWS Network Security Manager and $11.52 to protect 4 assets. 

Let’s assume you created several new policies for an organization subscribed to AWS WAF with 4 separate accounts across 2 regions. The breakdown of assets, accounts, and regions is described in this table:

• AWS Network Security Manager – Usage charges of $0.35 an hour for use of the product across 4 accounts where policies are created. 
• AWS Network Security Manager – Protected Asset charges for 40 AWS Application Load Balancers for $0.004 an hour each, protected by AWS WAF WebACLs. 

At the end of the month your total charges will be $1,123.20 for a full month. $1,008.00 for the use of AWS Network Security Manager by 4 accounts and $115.20 to protect 40 assets. 

Let’s assume you created a new protection policy for an organization using an AWS WAF WebACL and AWS Shield Advanced with 1 AWS Account. You apply the WebACL to protect 2 Application Load Balancers. 

• AWS Network Security Manager – Usage charges of $0.35 an hour for use of the product across 1 account where policies are created. 
• AWS Network Security Manager – Protected Asset charges for 2 AWS Application Load Balancers for $0.004 an hour each, protected by a single AWS WAF WebACL and AWS Shield Advanced.

At the end of the month your total charges will be $263.52 for a full month. $252 for the use of AWS Network Security Manager and $11.52 to protect 4 assets.