SPIKE: AWS Firewall Manager and WAF

[AntonyBishop]

Background

Background: Spike AWS Firewall Manager and WAF (which we can access as part of AWS Shield advanced), and gauge the benefits for CP.

AWS Shield Advanced is applied at an org level.

Questions / Assumptions

• How does this WAF compare with existing WAF?
• How are logs managed?
• How would users view logs?
• How are users notified about blocked traffic?
• How might we implement this on CP?
• If enabled, is this global i.e. for all users, or can it be an "opt in" feature?

Definition of done

• [ ] Questions answered
• [ ] Demo

Reference

How to write good user stories