How to Create Firewall on Amazon Web Services(AWS).

AWS Network Firewall is a managed service that makes it easy to deploy essential network protections for all of your Amazon Virtual Private Clouds (VPCs). The service can be setup with just a few clicks and scales automatically with your network traffic, so you don’t have to worry about deploying and managing any infrastructure.

AWS Network Firewall’s flexible rules engine lets you define firewall rules that give you fine-grained control over network traffic, such as blocking outbound Server Message Block (SMB) requests to prevent the spread of malicious activity.

• Login to aws portal.
• Click on Services.

• Under Networking & Content Delivery select VPC.

• Click on Firewalls.

• Click on Create Firewall.

• Provide the firewall name.
• Select existing VPC.

• Select Firewall availability zone & subnet.
• Select Firewall policy. We can Create or select existing firewall policy so click on link https://www.hackerxone.com/blog/how-create-firewall-policy-amazon-web-serviceaws for how to create firewall policy.

• Provide the key name & value for firewall.
• Click on Create Firewall.

• After sometime firewall is ready.

Create Firewall using Shell

• Setup aws-cli on your system so click on link https://www.hackerxone.com/blog/how-install-configure-aws-cli-ubuntu-1804
• Run the following command:

create-firewall –firewall-name firewall-name –firewall-policy-arn firewall-policy-arn –vpc-id vpc-id –subnet-mappings subnet-id