How to Create Firewall Policy on Amazon Web Service(AWS).
An AWS Network Firewall firewall policy defines the monitoring and protection behavior for a firewall. The details of the behavior are defined in the rule groups that you add to your policy, and in some policy default settings. To use a firewall policy, you associate it with one or more firewalls.
- Login to aws portal.
- Click on Services.

- Under Networking & Content Delivery select VPC.

- Click on Firewall Policies.

- Click on Create Firewall policy.

- Provide Firewall policy name.
- Click on Next.

- Choose how to treat fragmented packets & Actions.

- Click on Add stateless rule group so first click on link https://www.hackerxone.com/blog/how-create-network-firewall-rule-amazon-web-servicesaws for how to create stateless or stateful rule group.

- Select existing rule group.
- Click on Add rule group.

- Click on Stateful rule group.

- Select existing rule group.
- Click on Add rule group.

- Click on Next.

- Provide Key name & value for firewall policy.
- Click on Next.

- Review all the configurations.

- Click on Create firewall policy.

- After sometime firewall policy is created.

Create Firewall policy using Shell
- Setup aws-cli on your system so click on link https://www.hackerxone.com/blog/how-install-configure-aws-cli-ubuntu-1804
- Run the following command:
create-firewall-policy –firewall-policy-name policy-name –firewall-policy <value> -description <value>
