The VM-Series next-generation firewall allows developers and cloud security architects to embed inline threat and data loss prevention into their application development workflows. Native AWS services combined with VM-Series automation features allows you to create "touchless" deployments and enables your developers to operate at the speed of the cloud. Your applications and data are protected with whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.
With PanOS 10.0.2 version, you can leverage the AWS Gateway Load Balancer (GWLB) to scale and load-balance traffic across the stack of VM-Series firewalls. You can then expose the GWLB with the stack of firewalls as a VPC endpoint service for traffic inspection and threat prevention.