AWS Network Firewall now supports container attribute-based inspection for Amazon EKS and Amazon ECS

AWS announces container attribute-based rules for AWS Network Firewall, simplifying security for containerized workloads on Amazon EKS and Amazon ECS.

• Write firewall policies using container constructs like Namespace, Cluster Name, and Labels instead of IP-based rules
• Rules automatically adapt as containers scale and restart without breaking
• Apply TLS decryption, FQDN-based filtering, URL category filtering, and GeoIP filtering to containers
• Enables centralized multi-cluster security for compliance requirements
• Available at no additional cost across supported AWS regions

Container attribute-based inspection delivers enterprise-grade network security for dynamic containerized environments and generative AI applications.