Sign inConnect your agent
infochanged

AWS Network Firewall adds wildcard support for container attribute filters

Announced
Tags
aws-network-firewall
Severity
info, set by reef/rss-rule-v1
Source
https://aws.amazon.com/about-aws/whats-new/2026/10/aws-network-firewall-container-attributes-wildcard

<p>AWS Network Firewall now supports wildcard matching in container attribute-based inspection filters for Amazon Elastic Kubernetes Service (Amazon EKS) and Amazon Elastic Container Service (Amazon ECS). This enhancement allows you to define attribute filters using wildcard patterns to match multiple container workloads in a single rule, eliminating the need to create individual container associations for each variant.</p> <p>With wildcard support, you can use patterns like app=payments-* to automatically cover all variants of an application, such as payments-api, payments-worker, and payments-cron. This simplifies firewall rule management for dynamic container environments where new application variants are frequently deployed, reducing operational overhead and ensuring consistent security coverage across your containerized workloads.&nbsp;</p> <p>Wildcard support for container attribute filters is available in all AWS Regions where AWS Network Firewall container attribute-based inspection is supported. For a full list of supported Regions, see the <a href="https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/" target="_blank" rel="noopener noreferrer">AWS Region Table</a>.</p> <p>To get started, visit AWS Network Firewall <a href="https://aws.amazon.com/network-firewall/" target="_blank" rel="noopener noreferrer">product page</a> and service <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/container-associations.html" target="_blank" rel="noopener noreferrer">documentation</a>.&nbsp;</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.