Firewall Manager centrally configures and manages firewall rules — WAF, Shield Advanced, security groups — across all accounts in your AWS Organization from one place.
The tell
When a scenario has many accounts and needs consistent security rules enforced everywhere (and automatically applied to new resources), that’s Firewall Manager. A single WAF web ACL protects one app; Firewall Manager rolls policies out org-wide.
Test yourself
A large enterprise must enforce the same AWS WAF rules across dozens of accounts and have them automatically applied to new resources. Which service?
- AWS WAF configured per account
- AWS Firewall Manager
- AWS Config
- Security groups
👉 Click to reveal the answer & explanation
Correct answer: B. Firewall Manager centrally deploys and enforces WAF/Shield/security-group policies across all accounts in an Organization, including new resources. Per-account WAF (A) doesn’t centralize; Config (C) tracks compliance; security groups (D) are per-resource network controls.
Related topics
AWS WAF · AWS Organizations · AWS Shield
Ready to pass the AWS Solutions Architect Associate (SAA-C03)?
Stop guessing whether you’re ready. Our full-length, exam-realistic practice exams put you through the exact question style you’ll face — with a detailed explanation behind every answer, so you learn why, not just what.
- ✓ 6 full-length practice exams
- ✓ A detailed explanation for every single question
- ✓ Realistic, scenario-based questions — not memory dumps
- ✓ Lifetime access, kept current for 2026
Get the SAA-C03 Practice Exams →or try 25 free questions first