Amazon Firewall Manager pricing

Pricing example 1: Amazon Firewall Manager policy with 1 account

Let’s assume you created a new protection policy for an organization with 1 Account in scope of the policy.

• Amazon Firewall Manager charges ¥653 per month for the policy.
• In addition, Amazon Firewall Manager creates two Amazon Config rules per policy, per account. Let's assume that there are 100 configuration item (CI) changes across all resources per month, for a total of ¥2 (100 x ¥0.02) per month. In addition, let's assume there are 100 rule evaluations, resulting in ¥0.6 (100 x ¥0.006, where the first 100,000 evaluations are ¥0.006 each). The total Amazon Config charges will be ¥2.6 per month (¥2 + ¥0.6).
• Amazon Firewall Manager also creates a single Amazon WAF WebACL and Rule, at a cost of ¥32.65 per WebACL per month and ¥6.53 per Rule per month.
• At the end of the month your total charges will be ¥694.8 (¥653 for Amazon Firewall Manager, ¥2.6 for Amazon Config and ¥39.2 for Amazon WAF).
   

Pricing example 2: Amazon Firewall Manager policy with 7 accounts

Let's assume you created a new protection policy for an organization with 7 accounts.

• Amazon Firewall Manager charges are ¥653 per month for (1) policy.
• In addition, Amazon Firewall Manager creates (2) Amazon Config rules per policy, per account. Let's assume there are a total of 10,000 Config item changes across all accounts, accounting for ¥200 (10,000 x ¥0.02). In addition, let's assume there are 10,000 rule evaluations, resulting in ¥60 (10,000 x ¥0.006, where the first 10,000 evaluations are ¥0.006 each).
• The total Amazon Config charges are ¥260 per month (¥200 + ¥60).
• Amazon Firewall Manager creates one Amazon WAF WebACL and one Rule per account. Each WebACL costs ¥32.65 per month and Each Rule costs ¥6.53 per month, for a total of ¥274.2 per month = (¥32.65 WebACL + ¥6.53 Rule) X 7 Accounts.
• At the end of the month your charges will be a total of ¥1187.2 (¥653 for Amazon Firewall Manager + ¥260 for Amazon Config + ¥274.3 for Amazon WAF).
   

Pricing example: Amazon Firewall Manager Policy with 10 Accounts

Let’s assume you created a new Firewall Manager common policy that creates VPC Security Groups to secure EC2 instances across 10 Amazon Web Services Accounts in your Organization.

• Amazon Firewall Manager charges ¥653 per month for the policy.
• In addition, Amazon Firewall Manager creates two Amazon Config rules per policy, per account. Let’s assume that there are 100 configuration item (CI) changes across all resources per month, for a total of ¥2 (100 x ¥0.02) per month. In addition, let's assume there are 100 rule evaluations, resulting in ¥0.67 (100 x ¥0.0067, where the first 100,000 evaluations are ¥0.0067 each). The total Amazon Config charges will be ¥2.67 per month (¥2 + ¥0.67).
• At the end of the month your total charges will be ¥655.60 (¥653 for Amazon Firewall Manager and ¥2.67 for Amazon Config).

Pricing example: Amazon Firewall Manager Policy with 10 Accounts

Let’s assume you created a new Firewall Manager common policy that creates VPC network ACLs to secure VPC subnets across 10 Amazon Web Services Accounts in your Organization.

• Amazon Firewall Manager charges ¥653 per month for the policy.
• In addition, Amazon Firewall Manager creates two Amazon Config rules per policy, per account. Let’s assume that there are 100 configuration item (CI) changes across all resources per month, for a total of ¥2 (100 x ¥0.02) per month. In addition, let's assume there are 100 rule evaluations, resulting in ¥0.67 (100 x ¥0.0067, where the first 100,000 evaluations are ¥0.0067 each). The total Amazon Config charges will be ¥2.67 per month (¥2 + ¥0.67).
• At the end of the month your total charges will be ¥655.60 (¥653 for Amazon Firewall Manager and ¥2.67 for Amazon Config).

Pricing example: Amazon Firewall Manager policy for Route 53 Resolver DNS Firewall with 10 accounts in scope

Assume you create a new Firewall Manager Policy that creates Amazon Route 53 Resolver DNS Firewall rule group associations in each of the 10 VPCs across 10 different Amazon Web Services Accounts in your Organization. Also assume that the rule group associations use a centrally-shared domain list that contains 30,000 domain names that these rule groups use for DNS traffic filtering. Assume the firewall is active for one month (30 days) and each VPC has an average query volume of 10 queries per second.

• Amazon Firewall Manager charges ¥653 per month for the policy.
• In addition, Amazon Firewall Manager creates two Amazon Config rules per policy, per account. Let’s assume that there are 100 configuration item (CI) changes across all resources per month, for a total of ¥2 (100 x ¥0.02) per month. In addition, let's assume there are 100 rule evaluations, resulting in ¥0.67 (100 x ¥0.0067, where the first 100,000 evaluations are ¥0.0067 each). The total Amazon Config charges will be ¥2.67 per month (¥2 + ¥0.67).
• DNS Firewall charges ¥3.92 per million queries processed for the first 1 Billion queries/month), ¥2.61 per million queries processed for over 1 Billion queries/month, and ¥0.003 per domain name stored per month. Based on the stated assumptions this would result in charges of ¥8,165.12 (10 VPCS * 10 Accts * 10 queries per second = 1,000 queries * 86, 400 seconds per day * 30 days = 2,592,000,000 queries per month *¥3.92 per million queries for the first 1 Billion queries*¥2.61 per million queries for the remaining 1,592,000,000 queries = ¥8,075.12 per month for query charges + 30,000 domains *¥0.003 per domain = ¥90 per month for domain charges)
• At the end of the month your total charges will be ¥8,820.79 (¥653 for Amazon Firewall Manager, ¥2.67 for Amazon Config, and ¥8,165.12 for Route 53 Resolver DNS Firewall).
  

Pricing example: Amazon Firewall Manager Policy with 10 Accounts

Let’s assume you created a new Firewall Manager policy that creates Amazon Network Firewall endpoints in each of the 10 VPCs across 10 different Amazon Web Services Accounts in your Organization in the Beijing region. Assume each endpoint is active for one month (30 days) and a 2,500 GB are processed per month per endpoint

• Amazon Firewall Manager charges ¥653 per month for the policy.
• Amazon Network Firewall charges ¥7.171 per endpoint hour and ¥0.468 per GB processed. Based on the stated assumptions, this would result in a total charge of ¥63,331.20 (¥5,163.12 (endpoint hour charges/month) + (¥1,170.00 (GB processing charges/month)) X 10 endpoints.
• In addition, Amazon Firewall Manager creates two Amazon Config rules per policy, per account. Let’s assume that there are 100 configuration item (CI) changes across all resources per month, for a total of ¥2 (100 x ¥0.02) per month. In addition, let's assume there are 100 rule evaluations, resulting in ¥0.67 (100 x ¥0.0067, where the first 100,000 evaluations are ¥0.0067 each). The total Amazon Config charges will be ¥2.67 per month (¥2 + ¥0.67).
• At the end of the month your total charges will be ¥63,986.80 (¥653 for Amazon Firewall Manager, ¥2.6 for Amazon Config, and ¥63,331.20 for Amazon Network Firewall).