AWS Firewall Manager retrofitting: Harmonizing central security with application team flexibility

The article discusses AWS Firewall Manager's new "retrofitting" feature, which allows for more flexible central security management while preserving application team autonomy in configuring web ACLs (Web Access Control Lists).

• Retrofitting enables Firewall Manager to manage existing web ACLs without completely replacing them
• Application teams can continue using infrastructure as code (IaC) tools to manage WAF rules
• Firewall Manager adds security policy rules to top and bottom of existing web ACLs
• Supports existing AWS WAF deployments without requiring complete migration
• Helps prevent increased costs by allowing application-specific rules in separate web ACLs

The key benefit is harmonizing centralized security policies with application team flexibility, allowing organizations to enforce security standards without restricting team-level configuration capabilities.