Description

This control verifies if a Network Firewall policy includes at least one stateful or stateless rule group.

A firewall policy dictates how traffic is monitored and managed within an Amazon Virtual Private Cloud (Amazon VPC). Configuring stateful and stateless rule groups enables packet filtering, regulates traffic flow, and establishes default traffic handling rules.

Remediation

For guidance on configuring firewall logging, refer to the Firewall policy settings in AWS Network Firewall section of the AWS Network Firewall Developer Guide.