Resource sharing for Network Firewall and DNS Firewall policies - Amazon WAF, Amazon Firewall Manager, and Amazon Shield Advanced
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Resource sharing for Network Firewall and DNS Firewall policies

To manage Firewall Manager Network Firewall and DNS Firewall policies, you must enable resource sharing with Amazon Organizations in Amazon Resource Access Manager. This allows Firewall Manager to deploy protections across your accounts when you create these policy types.

To enable resource sharing, follow the instructions at Enable Sharing with Amazon Organizations in the Amazon Resource Access Manager User Guide.

Problems with resource sharing

You might encounter problems with resource sharing, either when you use Amazon RAM to enable it, or when you're working on Firewall Manager policies that require it.

Examples of these problems include the following:

  • When you follow the instructions to enable sharing, in the Amazon RAM console, the choice Enable sharing with Amazon Organizations is grayed out and not available for selection.

  • When you work in Firewall Manager on a policy that requires resource sharing, the policy is marked as non-compliant and you see messages indicating that resource sharing or Amazon RAM isn't enabled.

If you encounter problems with resource sharing, use the following procedure to try to enable it.

Try again to enable resource sharing