Network Firewall firewalls should have deletion protection enabled

How to fix it

In the console

VPC → Network Firewall → Firewalls → the firewall → Firewall details → Change protections

Deletion protection

Enabled

With the AWS CLI

aws network-firewall update-firewall-delete-protection --firewall-arn <firewall-arn> --delete-protection --region <region>

With Terraform

resource "aws_networkfirewall_firewall" "this" {
  name                = var.firewall_name
  firewall_policy_arn = var.firewall_policy_arn
  vpc_id              = var.vpc_id
  delete_protection   = true

  subnet_mapping {
    subnet_id = var.firewall_subnet_id
  }
}