AWS Network Firewall is a managed, stateful network firewall and intrusion prevention service for Amazon VPC traffic. It filters traffic at the perimeter of a VPC using customizable rules, including support for the open-source Suricata rule format. Because it is managed, capacity scales automatically with network load while giving security teams centralized control over inbound and outbound traffic.