Medium
Protect
Regional
Network Firewall firewalls should have subnet change protection enabled
NIST 800-53
Description
Confirms that AWS Network Firewall firewalls have subnet change protection enabled.
Remediation
Enable subnet change protection for the Network Firewall.
Steps
- Navigate to the VPC console
- Select the Network Firewall
- Modify the firewall to enable 'Subnet change protection'
- Apply the changes
Compliance
NIST 800-53