During the walkthrough, you’ll add firewall rules to influence traffic flows to and from a web server running on Amazon Elastic Compute Cloud (Amazon EC2) in a protected subnet. Additionally, the demo firewall is configured to send alert logs to Amazon CloudWatch, so you’ll see the filtering done by stateful rule groups.

Read full article on AWS Security Blog