Amazon Firewall Manager is integrated with Amazon Organizations so you can enable Amazon WAF rules across multiple accounts and resources from a single place. You can group rules, build policies, and centrally apply those policies across your entire infrastructure. For example, you can delegate the creation of application-specific rules within an account while retaining the ability to enforce global security policies across accounts.

Amazon Firewall Manager integrates with Managed Rules for Amazon WAF, which gives you an easy way to deploy pre-configured WAF rules on your applications. You can choose a Managed Rule, managed by Amazon Web Services, and deploy it consistently across your Application Load Balancers and API Gateways infrastructure with just a few clicks in the console. For example, you can easily protect your entire organization from zero-day vulnerabilities by subscribing to a Managed Rule for Amazon WAF.

With Amazon Firewall Manager, you get visibility into accounts and resources that are non-compliant with your policy configuration. Within the Amazon Firewall Manager console, you can monitor the status of accounts and resources that are missing WAF rule coverage and resources and take appropriate action. You can also get notified when there are changes to your configurations through SNS notification streams or through Amazon Security Hub.