The new feature tracks how often individual stateful firewall rules match network traffic, available across custom and managed rule groups by default. This visibility enables security teams to accelerate incident response, identify redundant or shadowed rules, and verify effectiveness of policy changes by monitoring real-time rule activations.
Hit counts refresh at configurable intervals down to 5 minutes and are delivered at no extra charge as part of the AWS Network Firewall service, with standard costs only applying to log data storage and queries. The feature is broadly available except in select Middle East AWS Regions.
Source & further reading
AWS Network Firewall Now Supports Stateful Rule Hit Counts ↗Source published 2026-08-17. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.