AWS services in this guidance
| AWS service | Description |
|---|---|
|
AWS CodeBuild |
Core. CodeBuild validates the configuration files (firewall, firewall policy, and rule group) and checks if the JSON format is valid. |
|
AWS CodePipeline |
Core. CodePipeline validates, tests, and implements changes based on updates to the configuration package in the S3 bucket. |
|
AWS Network Firewall |
Core. This guidance automates the process of provisioning a centralized Network Firewall to inspect traffic between VPCs. |
|
Amazon VPC |
Core. This guidance creates an inspection VPC with four subnets to support Transit Gateway attachments and Network Firewall endpoints. |
|
Amazon S3 |
Supporting. This guidance creates S3 buckets for firewall configurations, source code, artifacts, and logs. |
|
AWS Systems Manager |
Supporting. Provides application-level resource monitoring and visualization of resource operations and cost data. |
|
AWS Transit Gateway |
Optional. This guidance creates Transit Gateway attachments for your VPCs if you provide an existing transit gateway ID. |
