AWS re:Invent 2025 - Automating Suricata rules for AWS network firewall (DEV206)
Writing and updating Suricata rules for AWS Network Firewall shouldn’t be the blocker to achieving your security goals. In this session, I’ll share how we built a lightweight pipeline that transforms raw inputs, like ports, protocols, domains, and IPs, into production-ready suricata rules using Amazon EventBridge, AWS Lambda, and Amazon S3.