AWS Centralized WAF and VPC Security Group Management

The AWS Centralized WAF and VPC Security Group Management solution allows you to centrally configure, manage, and audit firewall rules across all your accounts and resources in AWS Organizations. This solution is a reference implementation to automate the process to setup AWS Firewall Manager security policies.

This solution provides pre-configured rules that can be deployed across accounts to (1) configure application-level firewalls for Web Application Firewall (WAF) and (2) audit unused and overly permissive virtual private cloud (VPC) security groups. It allows you to automatically enable the prerequisites required to use Firewall Manager, so you can spend more time focusing on your specific security needs.

This solution helps AWS enterprise customers create a quick baseline of firewall security rules across Layers 3-7 resources and maintain a consistent security posture within their organization. Additionally, this solution deploys Shield Advanced policies for customers who subscribe to AWS Shield Advanced, to protect against Distributed Denial of Service (DDoS) attacks to their AWS accounts.

Note: This solution must be installed in your Firewall Manager admin account. If you have not already set up Firewall Manager, refer to the Implementation Guide for the steps.