Overview One of our clients needed better visibility into outbound traffic across their AWS environment to detect potential threats and understand where workloads were connecting. We implemented AWS Network Firewall in each VPC, combining AWS-managed threat intelligence with custom Suricata rules to monitor egress traffic and generate actionable alerts.