AWS AWS Firewall Manager Service Limits

Protocols per protocol list

Resource sets per Firewall Manager admin account

Partner rule groups per AWS WAF policy

Applications per application list

Custom managed application lists in any content audit security group policy setting

Resources per resource set

Audit security groups per security group content audit policy

Amazon VPC instances in scope of a common security group policy

Organizational units in scope per policy per Region

AWS WAF Classic rule groups per AWS WAF Classic policy

Stateful rule group capacity per Network Firewall policy

Custom managed application lists per account

Custom managed protocol lists in any content audit security group policy setting

Inbound/outbound rules per network ACL policy

Primary security groups per common security group policy

VPCs that a single Network Firewall policy can automatically remediate

Accounts per Firewall Manager admin

Rule groups per AWS WAF policy

Explicitly included or excluded accounts per policy per Region

Tags to include or exclude resources per policy

IPV4 CIDRs for a Network Firewall policy

Custom managed protocol lists per account

Firewall Manager policies per organization per Region

Stateful rule groups per Network Firewall policy

Route 53 Resolver DNS Firewall rule groups per DNS Firewall policy

Stateless rule group capacity per Network Firewall policy

Stateless rule groups per Network Firewall policy

Custom managed application lists for rules that allow all traffic

Admins per organization in Firewall Manager

Web ACL capacity units (WCU) used in an AWS WAF policy