AWS Firewall Manager pricing calculator
Policy and Downstream Costs. Estimate your costs using AWS list prices.
Estimates from AWS list prices, not an AWS quote. Discounts, taxes and credit terms may affect your bill.
01 · How AWS Firewall Manager pricing works
What you pay for
- $100 per protection policy per Region per month (WAF, security group, Network Firewall, DNS Firewall, third-party firewall policies).
- Shield Advanced policies: no Firewall Manager fee for Shield Advanced subscribers, per the pricing page.
- Deployed resources (WAF ACLs, Network Firewall endpoints, Config rules and items) billed by their services.
Common cost traps
- Each policy is billed per Region, so one global policy in 10 Regions is $1,000/month.
- Config recording required by Firewall Manager adds per-item charges in every account.
- Policies deploy WAF ACLs into every in-scope account, multiplying WAF fees.
Ways to reduce cost
- Combine rules into fewer policies.
- Limit policies to Regions where you run workloads.
- Scope Config recording to the resource types Firewall Manager needs.
Free Tier & account eligibility
Free Tier depends on account age. Accounts created on or after 15 July 2025 get a $100 sign-up credit plus up to $100 more for completing onboarding activities; on the Free plan these last 6 months (or until used up), on the Paid plan unused Free Tier credits stay usable for 12 months from sign-up. Accounts created before 15 July 2025 keep the legacy Free Tier (12-month offers plus always-free offers). Always-free offers apply on both plans. Firewall Manager has no free tier; it also needs AWS Organizations and AWS Config, which bill their own usage. New-plan accounts can pay from Free Tier credits.
02 · AWS credits & runway
Do credits cover AWS Firewall Manager?
Firewall Manager policy fees and the AWS resources it deploys (WAF, Shield, Network Firewall, Config) are eligible usage and are offset by credits. Third-party firewall subscriptions (Palo Alto Networks, Fortinet) are billed through AWS Marketplace and are excluded. General rules: credits only offset charges from the billing cycle in which they were applied onward (never past bills), they apply only to the services listed on the credit in Billing and Cost Management > Credits, they expire on the date shown there, and accounts on the AWS Free plan cannot receive Activate credits until they upgrade to the Paid plan.
Check my creditsExcluded charges & conditions
- Upfront payments for Savings Plans and Reserved Instances (All Upfront, and the upfront part of Partial Upfront). The recurring hourly fee of a No Upfront commitment is billed as normal usage and can be offset.
- AWS Marketplace charges (Activate credits make an exception for third-party foundation models used through Amazon Bedrock).
- AWS Enterprise Support, Enterprise On-Ramp, Unified Operations, resold support and partner-led support.
- Amazon Route 53 domain name registration and transfer fees.
- Taxes (sales, use, VAT and similar), AWS Professional Services, Training and Certification, Mechanical Turk, AWS Managed Services, and any use for cryptocurrency mining.
Illustrative credit runway
Single-service examples from the supplied data, not your calculator result. Months = credit amount ÷ monthly cost, before credit expiry. Credits can expire before these theoretical months are used; coverage and other AWS services can shorten runway.
| Usage profile | Monthly estimate | $10,000 | $25,000 | $100,000 |
|---|---|---|---|---|
| Small | $200.00 | 50.0 mo. | 125.0 mo. | 500.0 mo. |
| Medium | $1,000.00 | 10.0 mo. | 25.0 mo. | 100.0 mo. |
| Large | $8,000.00 | 1.3 mo. | 3.1 mo. | 12.5 mo. |
Small profile assumptions
2 policies (WAF + security group) per Region | Policies: 2 policy-months x $100 = $200.00 | Total ~$200.00/month, us-east-1 on-demand list prices, before Free Tier, taxes and support.
Medium profile assumptions
5 policies in 2 Regions (10 policy-Regions) | Policies: 10 policy-Region-months x $100 = $1,000.00 | Total ~$1,000.00/month, us-east-1 on-demand list prices, before Free Tier, taxes and support.
Large profile assumptions
20 policies across 4 Regions (80 policy-Regions) | Policies: 80 policy-Region-months x $100 = $8,000.00 | Total ~$8,000.00/month, us-east-1 on-demand list prices, before Free Tier, taxes and support.
04 · Questions
AWS Firewall Manager pricing FAQ
What does Firewall Manager cost?
$100 per policy per Region per month, plus the cost of the resources it deploys.
Is it free with Shield Advanced?
Shield Advanced subscribers do not pay the Firewall Manager fee for some policy types; check the pricing page for which.
Do credits cover it?
Policy fees and AWS resources yes; third-party firewall subscriptions bought through Marketplace no.
What else do I need?
AWS Organizations and AWS Config enabled in each account.
05 · Sources & estimate notes
Content pack dated 2026-10-19. Calculator rates remain their existing snapshots; this content update is not a price refresh.
Verification notes
- Which policy types are free for Shield Advanced subscribers should be confirmed on the pricing page.
- Runway prices come from the calculator repository snapshot rate card firewall-manager (no AWS Price List mapping in the build). Confirm the main unit prices on https://aws.amazon.com/firewall-manager/pricing/ before publishing.