Next steps and resources

Identify application components that reside in your on-premises perimeter zone. Then, document the security requirements for those application workloads.

Create an AWS account for hosting the application and create a network firewall.

Migrate your application to the AWS account.

Create a firewall policy and associate it with the firewall. Optionally, you can create notifications for rule violations.

Create route tables to ensure traffic is routed through the firewall.

Verify that the policy works as desired for incoming and outgoing connections.