Introducing a new console experience for Amazon WAF
You can now use the updated experience to access Amazon WAF functionality anywhere in the console. For more details, see Working with the console.
Key concepts in network security director
Note
Amazon Shield network security director is in public preview release and is subject to change.
- Resources
-
The compute, networking, and security resources that handle your application traffic:
Compute – Amazon Elastic Compute Cloud instances
Networking – Application Load Balancers, Amazon API Gateways, Amazon CloudFront distributions, VPC subnets, and VPC elastic network interfaces (ENIs)
Security – Amazon WAF web ACLs, VPC security groups, and VPC network access control lists (NACLs)
- Findings
-
Alerts about missing or misconfigured network security services, with severity levels of NONE, INFORMATIONAL, LOW, MEDIUM, HIGH, or CRITICAL. network security director generates findings by evaluating configuration settings and threat intelligence for each resource.
- Severity
-
A measure of a resource's vulnerability to potential security events, based on Amazon best practices and threat intelligence. Severity assessment considers both potential vulnerabilities and existing protections. A resource's severity level matches its most severe finding, or shows as none if there are no findings.
- Network topology
-
A visual representation of your network that shows resource connections, internet exposure, and tag-based relationships. Use the topology view to investigate resources and their findings.
Understanding network security director findings
Note
Amazon Shield network security director is in public preview release and is subject to change.
Network security director generates specific findings for each type of resource it analyzes. These findings help you identify security issues and take appropriate action. The following table lists all possible findings by resource type.
| Resource type | Finding description |
|---|---|
| Application Load Balancer |
|
| Amazon API Gateway |
|
| Amazon CloudFront |
|
| Amazon Elastic Compute Cloud (EC2) instance |
|
| VPC security group |
|
| VPC network access control list (NACL) |
|
| Amazon WAF web ACL |
|