VM-Series, when combined with native AWS services, enable you to create "touchless" deployments and allow your developers to operate at the speed of the cloud. VM-Series protects your applications and data using whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.

VM-Series now supports DPDK on the C5, C5n, M5, and M5n instances, running on the AWS Nitro System, to efficiently process traffic and offer increased performance. In addition, Panorama (available separately in Marketplace) allows the VM-Series to be managed centrally alongside our firewall appliances to maintain security policies that are consistent with on-premises environments.

There are three PAYG bundles available. The licenses includes are as follows:
Bundle 1: VM-Series+Threat Prevention+Premium Support. Link: https://aws.amazon.com/marketplace/pp/prodview-mn63yjbq37n4c
Bundle 2: VM-Series+Threat Prevention+URL Filtering+DNS Security+Global Protect+WildFire+Premium Support.
Bundle 3: VM-Series+Advanced Threat Prevention+Advanced URL Filtering+DNS Security+Global Protect+WildFire+Premium Support. Link: https://aws.amazon.com/marketplace/pp/prodview-ztyhfbj3wno64