Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

**AWS Network Firewall container attribute-based rules for Amazon EKS/ECS**: The post describes how to map Kubernetes attributes (namespaces, pod names, cluster names, labels) to Network Firewall container associations and reference them in Suricata-compatible stateful rules to provide layer 7 inspection, FQDN filtering, TLS handling, and enriched logging for containerized workloads; it includes a console walkthrough, prerequisites (for example disabling SNAT), testing guidance, and considerations for performance and pod-to-pod traffic.