Security & identity
AWS Firewall Manager
- Timebilled
- Bytesnot billed
- Callsnot billed
In one line
Per policy, per Region, per month. Whatever the policy deploys bills separately at full price.
What gets missed
You pay the policy fee and full price for the WAF ACLs, Network Firewall endpoints and Config rules it rolls out. Shield Advanced subscribers get the policy fee waived but still pay for Config.
Find it on your bill
Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.
PolicyPolicy-WAFPolicy-Network-Firewall
Bills the same way
These services turn exactly the same meters, so what you learn here transfers.