Skip to main content

AWS Solutions Library

Guidance for Cross Network Traffic Inspection with AWS Network Firewall

Open guide
Go to sample code

Overview

This Guidance demonstrates how to automate the deployment of centralized network security infrastructure that inspects and filters traffic across multiple cloud environments. It shows how to establish a reliable, highly available architecture that protects workloads across multiple Availability Zones while reducing operational overhead. By automating configuration management with built-in validation checks, the Guidance prevents misconfigurations and helps ensure consistent security policy enforcement. Organizations can benefit from simplified network security management while maintaining operational resilience and scalability.

Benefits

Update and deploy network security rules through a streamlined configuration process. Changes automatically trigger validation and implementation across your infrastructure.

Manage network security for thousands of VPCs from a single control point, simplifying policy administration and helping ensure consistent protection across your organization.

Audit security policy modifications through version-controlled workflows, enabling team collaboration while maintaining comprehensive change history.

How it works

These technical details feature an architecture diagram to illustrate how to effectively use this solution. The architecture diagram shows the key components and their interactions, providing an overview of the architecture's structure and functionality step-by-step.

Download the architecture diagram

Deploy with confidence

Everything you need to launch this Guidance in your account is right here

We'll walk you through it

Dive deep into the implementation guide for additional customization options and service configurations to tailor to your specific needs.

Open guide

Let's make it happen

Ready to deploy? Review the sample code on GitHub for detailed deployment instructions to deploy as-is or customize to fit your needs. 

Go to sample code

Disclaimer

The sample code; software libraries; command line tools; proofs of concept; templates; or other related technology (including any of the foregoing that are provided by our personnel) is provided to you as AWS Content under the AWS Customer Agreement, or the relevant written agreement between you and AWS (whichever applies). You should not use this AWS Content in your production accounts, or on production or other critical data. You are responsible for testing, securing, and optimizing the AWS Content, such as sample code, as appropriate for production grade use based on your specific quality control practices and standards. Deploying AWS Content may incur AWS charges for creating or using AWS chargeable resources, such as running Amazon EC2 instances or using Amazon S3 storage.

References to third-party services or organizations in this Guidance do not imply an endorsement, sponsorship, or affiliation between Amazon or AWS and the third party. Guidance from AWS is a technical starting point, and you can customize your integration with third-party services when you deploy the architecture.