Skip to content

automated approaches involving an AWS Network Firewall Rule Group, paired with an AWS Lambda function to perform steps

License

Notifications You must be signed in to change notification settings

aws-samples/aws-network-firewall-automation-examples

anf-samples

This collection of Amazon Network Firewall templates, demonstrates automated approaches involving an AWS Network Firewall Rule Group, paired with an AWS Lambda function to perform steps like, parsing an external source, and keeping the Rule Group automatically up to date.

File Structure

This project consists of CloudFormation Templates and snippets of source code that demonstrate the functional aspects of the approach.

Examples

Abuse.CH

  • Examples of using URLs hosting IP addresses, hostnames, or Suricata rules from https://abuse.ch

AllowListGenerator

  • Example of automating the creation of an allow list Suricata stateful rule group for AWS Network Firewall based on HTTP/TLS traffic logs, also provides deep visibility into HTTP/TLS traffic patterns.

Alphasoc

Emerging Threats

Linode Addresses

  • Example of using a published list of Linode addresses to drop or alert on the resulting traffic (https://geoip.linode.com/)

NfwSlackIntegration

  • Example of propagating the alerts generated by the AWS Firewall Manager to a configurable Slack channel

SFTP-FQDN

  • Example where an Domain List is used to resolve IPs for the domain and block the associated IP addresses as well

SpamHaus

TLS Fingerprint

  • An example that uses an Amazon Network Firewall Domain List, partnered with a stateful Suricata rule group to fetch and enforce the TLS Fingerprint of the domain

TOR Project

Architecture Diagram

Getting Started

01. Clone the repository

  • Clone the repository:

02. Deploy the AWS Network Firewall Rule Group Automations solution:

  • Using AWS CloudFormation, create a Stack from the templates available in the deploment folders from where you cloned the deployment assets.

License Summary

This sample code is made available under the MIT-0 license. See the LICENSE file.

About

automated approaches involving an AWS Network Firewall Rule Group, paired with an AWS Lambda function to perform steps

Topics

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published