Before using AWS, it helps to understand some networking basics. Here are the essentials:

Route 53 Global Resolver and DNS Firewall now provide DNS analytics and insights through native Amazon CloudWatch integration. These new capabilities enable network administrators and security teams to gain full observability into DNS query patterns, monitor DNS Firewall rule effectiveness, detect anomalous activity, and optimize DNS infrastructure performance. DNS analytics and insights is available in all AWS Regions where Amazon CloudWatch, Route 53 Global Resolver, and DNS Firewall are available. With CloudWatch Metrics and Contributor Insights, customers can search and analyze DNS query logs, create metric filters for specific patterns such as blocked queries and DNS response codes, and set automated alarms. A new Analytics tab in both the Global Resolver and DNS Firewall consoles provides streamlined access to all analytics in one place. For example, customers can create a metric filter for blocked DNS queries by VPC and set an alarm to trigger when more than 10 queries are blocked within an hour, enabling rapid response to potential security threats. Standard Amazon CloudWatch pricing applies to the metrics that customers opt in to. To learn more, visit the Route 53 documentation.

Route 53 Global Resolver and DNS Firewall now provide DNS analytics and insights through native Amazon CloudWatch integration. These new capabilities enable network administrators and security teams to gain full observability into DNS query patterns, monitor DNS Firewall rule effectiveness, detect anomalous activity, and optimize DNS infrastructure performance. DNS analytics and insights is available in all AWS Regions where Amazon CloudWatch, Route 53 Global Resolver, and DNS Firewall are available. With CloudWatch Metrics and Contributor Insights, customers can search and analyze DNS query logs, create metric filters for specific patterns such as blocked queries and DNS response codes, and set automated alarms. A new Analytics tab in both the Global Resolver and DNS Firewall consoles provides streamlined access to all analytics in one place. For example, customers can create a metric filter for blocked DNS queries by VPC and set an alarm to trigger when more than 10 queries are blocked within an hour, enabling rapid response to potential security threats. Standard Amazon CloudWatch pricing applies to the metrics that customers opt in to. To learn more, visit the Route 53 documentation.

Route 53 Global Resolver and DNS Firewall now provide DNS analytics and insights through native Amazon CloudWatch integration. These new capabilities enable network administrators and security teams to gain full observability into DNS query patterns, monitor DNS Firewall rule effectiveness, detect anomalous activity, and optimize DNS infrastructure performance. DNS analytics and insights is available in all AWS Regions where Amazon CloudWatch, Route 53 Global Resolver, and DNS Firewall are available. With CloudWatch Metrics and Contributor Insights, customers can search and analyze DNS query logs, create metric filters for specific patterns such as blocked queries and DNS response codes, and set automated alarms. A new Analytics tab in both the Global Resolver and DNS Firewall consoles provides streamlined access to all analytics in one place. For example, customers can create a metric filter for blocked DNS queries by VPC and set an alarm to trigger when more than 10 queries are blocked within an hour, enabling rapid response to potential security threats. Standard https://aws.amazon.com/cloudwatch/pricing/ applies to the metrics that customers opt in to. To learn more, visit the https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/Welcome.html.

AWS announces DNS analytics and insights for Route 53 Global Resolver and DNS Firewall through CloudWatch integration, enabling network administrators to monitor DNS patterns and detect anomalies.

Today, AWS announces the general availability of AWS Network Security Manager, a comprehensive network security management solution designed to simplify security policy deployment and enforcement at scale. Network Security Manager supports AWS WAF and AWS Shield Advanced, with support for AWS Network Firewall soon to follow. AWS Network Security Manager enables security teams to consistently enforce firewall and DDoS protection configurations across their entire AWS organization. Network Security Manager features always-on security deployment automation that applies AWS WAD and AWS Sheild Advanced security protection to Internet facing assets like AWS Application Load Balancer and Amazon CloudFront. This automated approach helps security teams deploy and manage WAF rules and Shield Advanced protections efficiently, ensuring consistent security posture across targeted accounts and resources. Teams can centrally manage security policies, automatically detect configuration drift, and apply remediation reducing the operational overhead of manual security management while maintaining comprehensive protection. AWS Network Security Manager is generally available in US East (N. Virginia). For pricing information, visit the AWS Network Security Manager Pricing page.

Today, AWS announces the general availability of AWS Network Security Manager, a comprehensive network security management solution designed to simplify security policy deployment and enforcement at scale. Network Security Manager supports AWS WAF and AWS Shield Advanced, with support for AWS Network Firewall soon to follow. AWS Network Security Manager enables security teams to consistently enforce firewall and DDoS protection configurations across their entire AWS organization. Network Security Manager features always-on security deployment automation that applies AWS WAD and AWS Sheild Advanced security protection to Internet facing assets like AWS Application Load Balancer and Amazon CloudFront. This automated approach helps security teams deploy and manage WAF rules and Shield Advanced protections efficiently, ensuring consistent security posture across targeted accounts and resources. Teams can centrally manage security policies, automatically detect configuration drift, and apply remediation reducing the operational overhead of manual security management while maintaining comprehensive protection. AWS Network Security Manager is generally available in US East (N. Virginia). For pricing information, visit the https://aws.amazon.com/network-security-manager/pricing/.

Today, AWS announces the general availability of AWS Network Security Manager, a comprehensive network security management solution designed to simplify security policy deployment and enforcement at scale. Network Security Manager supports AWS WAF and AWS Shield Advanced, with support for AWS Network Firewall soon to follow. AWS Network Security Manager enables security teams to consistently enforce firewall and DDoS protection configurations across their entire AWS organization. Network Security Manager features always-on security deployment automation that applies AWS WAD and AWS Sheild Advanced security protection to Internet facing assets like AWS Application Load Balancer and Amazon CloudFront. This automated approach helps security teams deploy and manage WAF rules and Shield Advanced protections efficiently, ensuring consistent security posture across targeted accounts and resources. Teams can centrally manage security policies, automatically detect configuration drift, and apply remediation reducing the operational overhead of manual security management while maintaining comprehensive protection. AWS Network Security Manager is generally available in US East (N. Virginia). For pricing information, visit the AWS Network Security Manager Pricing page.

Traditional firewalls are too slow for modern behavioral attacks, so I built a zero-trust security pipeline that lets a local LLM write network drop rules in real-time. Here is how I used OpenSearch and an AWS Cedar sandbox to mathematically prevent the AI from accidentally bricking my own machine.

Learn the fundamentals of AWS networking by understanding VPCs, public and private subnets, route tables, Internet Gateway, NAT Gateway, security groups, and network connectivity with practical examples. Tags AWS · Networking · Amazon VPC · Cloud Computing · Beginner

Groups Conversations All groups and messages Sign in     Choosing the right inspection architecture for AWS Network Firewall 0 views Eyal Estrin unread, 9:08 PM (22 minutes ago)    to https://aws.amazon.com/blogs/networking-and-content-delivery/choosing-the-right-inspection-architecture-for-aws-network-firewall/ Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward

This article compares three AWS Network Firewall deployment patterns—Traditional Inspection VPC, Multiple VPC Endpoints, and Transit Gateway Native Attachment—to help organizations choose the right inspection architecture for their multi-VPC environments.

Networking teams operating multi-VPC, multi-account environments need a consistent inspection architecture for compliance, threat detection, and traffic filtering. With the three deployment patterns now available for AWS Network Firewall (Traditional Inspection Amazon Virtual Private Cloud (Amazon VPC), Multiple VPC Endpoints launched May 2025, and Transit Gateway Native Attachment launched July 2025), a common question emerges: [...]

Learn how AWS Network Firewall helps protect Amazon VPC traffic using centralized inspection, stateless and stateful rules, domain filtering, logging, and route-based traffic steering. This practical guide explains the architecture, key components, deployment flow, troubleshooting considerations, and real-world security use cases.

Deployed a high-availability AWS VPC with public & private subnets, an Internet Gateway, route tables with connectivity tested through the public network

Struggling to figure out why your EC2 instance can't reach the internet? You’re not alone. Let's break down the difference between AWS Security Groups and NACLs using a simple, real-world analogy so you never get them confused again.

This article guides users through customizing a hub and spoke network topology deployed by AWS Transform, covering firewall deployment, east-west routing, outbound internet access, and inbound application publishing.

Introduction Network design takes real effort in any migration. You need to map source network segments to VPCs, plan subnets across Availability Zones, translate firewall rules into security groups, and configure route tables that keep traffic flowing, a challenge the AWS Transform – Migrations network migration agent solves for you. You upload exports from well-known [...]

AWS has introduced TCP Reset for Gateway Load Balancer to help TCP connections recover faster when a security appliance becomes unavailable. Here is what this changes for cloud networking, resilient architectures, and network security.

Learn how to map traditional enterprise networking principles to cloud environments using Amazon Virtual Private Cloud (VPC). This guide demonstrates how to configure subnets and security groups to build a highly available and secure cloud network, delivering enhanced scalability, reliability, and operational efficiency for your architecture.

A hands-on walkthrough of how traditional on-premise firewall engineers can retrain their way of thinking to cloud-native security with AWS Security Groups and Network ACLs

AI traffic monetization uses the x402 open protocol for machine-to-machine payments. The following describes the request lifecycle for a monetized resource:

Groups Conversations All groups and messages Sign in     OCI Network Firewall Adds Multiple Certificate Support for SSL Inbound Inspection 0 views Eyal Estrin unread, 7:34 AM (8 minutes ago)    to https://blogs.oracle.com/cloud-infrastructure/oci-firewall-multiple-cert-ssl-inspection Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward

AWS Network Firewall’s rule hit count capability gives security teams visibility into which stateful firewall rules are matching traffic.