64. AWS Network Firewall

最新推荐文章于 2023-10-25 09:09:41 发布

JessicaWind

最新推荐文章于 2023-10-25 09:09:41 发布

阅读量397

点赞数

分类专栏： AWS Certification 文章标签： aws

本文链接：https://blog.csdn.net/meiyubaihe/article/details/122858250

版权

Overview

AWS Network Firewall is a stateful, managed, network firewall and intrusion detection and prevention service for your virtual private cloud (VPC) that you created in Amazon Virtual Private Cloud (Amazon VPC).
With Network Firewall, you can filter traffic at the perimeter of your VPC. This includes filtering traffic going to and coming from an internet gateway, NAT gateway, or over VPN or AWS Direct Connect.
Network Firewall uses the open source intrusion prevention system (IPS), Suricata, for stateful inspection

Firewall – Provides traffic filtering logic for the subnets in a VPC.
FirewallPolicy
- Defines a reusable set of stateless and stateful rule groups, along with some policy-level behavior settings.
- The firewall policy provides the network traffic filtering behavior for a firewall.
- You can use a single firewall policy in multiple firewalls.
RuleGroup
- Defines a set of rules to match against VPC traffic, and the actions to take when Network Firewall finds a match.
- Network Firewall uses stateless and stateful rule group types, each with its own Amazon Resource Name (ARN).

Virtual private cloud (VPC) – A virtual network dedicated to your AWS account.
Internet gateway – A gateway that you attach to your VPC to enable communication between resources in your VPC and the internet.
Subnet – A range of IP addresses in your VPC.
Firewall subnet
- A subnet that you've designated for exclusive use by Network Firewall for a firewall endpoint.
- A firewall endpoint can't filter traffic coming into or going out of the subnet in which it resides, so don't use your firewall subnets for anything other than Network Firewall.
- You install the fir