AWS Network Security Manager Is Now Generally Available!
Hey everyone, it's me, Shiichan! Here's some news security teams have probably been waiting for!
AWS What's New
aws.amazon.com
What was announced?
This is from AWS What's New. AWS Network Security Manager, a new service designed to simplify security policy deployment and enforcement at scale, is now generally available in the US East (N. Virginia) Region. It currently supports AWS WAF and AWS Shield Advanced, with AWS Network Firewall support coming soon.
The story so far
In organizations with many AWS accounts, teams had to manually configure and check WAF rules and Shield Advanced protection for every internet-facing resource, like Application Load Balancers and CloudFront distributions, one by one. That made it easy for configurations to drift between accounts and for changes to slip through unnoticed, piling up operational overhead over time.
What changes
- Always-on deployment automation applies WAF and Shield Advanced protection automatically to internet-facing assets like Application Load Balancer and CloudFront
- Security policies can be managed centrally, from one place
- Configuration drift across targeted accounts and resources is automatically detected, with remediation applied
- Cuts down the operational load of manual security management while keeping protection consistent
Wrap-up
- AWS Network Security Manager is now GA in US East (N. Virginia)
- Supports AWS WAF and AWS Shield Advanced today, with AWS Network Firewall coming soon
- Automated deployment, central management, and drift detection/remediation streamline security operations at scale
- Worth checking out if your team has been wrestling with WAF or Shield config management across multiple accounts!
