Posted On: Aug 21, 2020
AWS Firewall Manager now supports security groups on Application Load Balancers and Classic Load Balancers, allowing you to centrally configure and audit security groups associated with these resource types, across multiple accounts in your organization. Firewall Manager today supports security groups associated with EC2 instances and Elastic Network Interfaces (ENIs). With this launch, you can now utilize Firewall Manager’s capabilities to also centrally manage security groups associated with Application Load Balancers and Classic Load Balancers. You can audit security groups associated with these resource types to ensure they are only accessing IP CIDRs or ports mandated by your organization. You can use pre-packaged audit rules provided by Firewall Manager, or customize your own audit rules to check for non-compliance. For example, you can audit existing security group rules on Application Load Balancers to ensure they are only accessing the CloudFront IPs you have listed. Similarly, you can also define a Firewall Manager policy to specify security groups with a baseline set of inbound and outbound rules that you want associated with your load balancers. Only requests that comply with the inbound rules can reach your load balancers, and the load balancers will only distribute requests that meet the outbound rules. Furthermore, with Firewall Manager, you can auto-remediate any non-compliant rules and get a detailed list of violations on your Firewall Manager console.
Available globally, AWS Firewall Manager is a security management service which allows customers to centrally configure and manage firewall rules across their accounts and applications in AWS Organization. With Firewall Manager, customers can centrally manage AWS WAF rules, AWS Shield Advanced protections, and VPC security groups across their entire AWS Organization. Firewall Manager ensures that all security rules are consistently enforced, even as new accounts or applications are created.
To get started, see the AWS Firewall Manager developer guide for more details. See the AWS Region Table for the list of regions where AWS Firewall Manager is currently available. To learn more about AWS Firewall Manager, its features and pricing, please visit the website.