AWS re:Invent 2025 - Automating Suricata rules for AWS network firewall (DEV206)

Writing and updating Suricata rules for AWS Network Firewall shouldn’t be the blocker to achieving your security goals. In this session, I’ll share how we built a lightweight pipeline that transforms raw inputs, like ports, protocols, domains, and IPs, into production-ready suricata rules using Amazon EventBridge, AWS Lambda, and Amazon S3. You’ll learn how we used built-in filtering and transformation to streamline rule generation and updates, reduce operational overhead, and make Suricata more accessible for security teams. This is a story of event-driven design and practical automation that brings powerful network controls into reality. Learn more: More AWS events: https://go.aws/3kss9CP Subscribe: More AWS videos: http://bit.ly/2O3zS75 More AWS events videos: http://bit.ly/316g9t4 ABOUT AWS: Amazon Web Services (AWS) hosts events, both online and in-person, bringing the cloud computing community together to connect, collaborate, and learn from AWS experts. AWS is the world's most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—are using AWS to lower costs, become more agile, and innovate faster. #AWSreInvent #AWSreInvent2025 #AWS