Analyze network security with Amazon Q Developer - AWS WAF, AWS Firewall Manager, AWS Shield Advanced, and AWS Shield network security director

Introducing a new console experience for AWS WAF

You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see Working with the updated console experience.

Analyze network security with Amazon Q Developer

Amazon Q Developer is a generative artificial intelligence (generative AI)-powered assistant that works with network security director to help answer your questions and provide recommendations about network security and remediation options.

You can interact with Amazon Q Developer by choosing the Q button or Explore with Amazon Q Developer anywhere it appears in the network security director console. This section guides you through the steps to ask questions of Q from the network security director Dashboard.

To engage with Amazon Q Developer
Note

You must have a completed network analysis before you can chat with Amazon Q Developer.

  1. Sign in to the AWS Management Console and open the AWS Shield network security director console at https://console.aws.amazon.com/wafv2/network-director/.

  2. From the network security director home page, choose Dashboard.

  3. In the Ask Amazon Q Developer widget, choose a question to use as a prompt in the Amazon Q Developer chat interface.

  4. In the Amazon Q Developer chat interface, submit your request.

Following are example questions about network security that you can ask Amazon Q Developer:

  • Identify my top network security findings

  • Summarize the network security of my environment

  • Are my systems at risk of DDoS attacks?

  • How can I improve my network security?

  • Do I have any resources without WAF protection?

  • Which resources are not protected from common web vulnerabilities?

  • What are the common network security issues on my EC2 instances?

  • Do I have any WAF web ACLs that aren't protecting anything?

After using Amazon Q Developer to get additional insights, you may want to run another network analysis to verify any improvements in your security configuration. Return to Run a network analysis to start a new analysis.