networkfirewall

Configures AWS Network Firewall, the managed stateful VPC firewall: deploying a firewall and routing traffic through its endpoints; centralizing inspection for many VPCs with a transit gateway-attached firewall that keeps stateful flows symmetric across Availability Zones; filtering outbound traffic by domain name; logging and rule tuning; TLS inspection with ACM certificates; writing Suricata rules; managing rules as CloudFormation/IaC; blocking an indicator mid-incident; migrating off a third-party firewall appliance; and diagnosing dropped traffic. Applicable when the user wants to inspect or filter VPC traffic at Layer 3 and 4, allow or block outbound domains, manage firewall rules as IaC, or decrypt TLS. Not applicable for AWS WAF Layer 7 rules (waf skill), Gateway Load Balancer appliance inspection (gatewayloadbalancer skill), Route 53 Resolver DNS Firewall (route53 skill), or transit gateway route tables and appliance-mode attachments (transitgateway skill).