pf-09-aws-netops-firewall-automation

A CLI that checks whether a firewall request is already open, previews changes only for what is blocked, and verifies the real traffic.

• Python
• boto3
• AWS
• CloudWatch Logs
• Athena
• Excel

3

Steps: confirm, modify, flowlog

4

Input formats

4

Resource types identified

Approach

netops confirm resolves addresses to AWS resources and evaluates security group rules and routes. Only blocked flows go to modify, which prints a plan first. flowlog searches CloudWatch Logs or Athena for the actual traffic.

View on GitHub ↗
Open the case: case-studies/aws-netops-firewall/README.md →