AWS Firewall Manager Pricing Calculator - Policy and Downstream Costs
Estimate AWS Firewall Manager policy fees by Region and policy family, including Shield Advanced inclusion and optional AWS Config, WAF, Network Firewall, and DNS Firewall charges.
Free price alerts · Platform launching early 2027
Get an email when Firewall Manager prices change
CloudBurn re-checks AWS prices every week and emails you when a price behind this calculator changes.
30% founding-member discount
Only waitlist members get it. Join now and keep 30% off for as long as you keep your plan.
Alert emails only arrive when a price changes; the waitlist sends two a month at most. Unsubscribe anytime. Privacy policy
Tick the box to also save your spot on CloudBurn Platform:
- Price your whole stack in minutesThe AWS Simple Pricing Calculator puts Firewall Manager and the rest of your AWS services in one estimate, ready to export.
- Know the cost before you deployThe GitHub App estimates what your Terraform, CDK or CloudFormation changes will cost before they ship.
- Find the waste, then fix itScans of your live AWS accounts show what is costing money for nothing, with clear steps to fix each finding.
Frequently Asked Questions
How is AWS Firewall Manager priced?
Firewall Manager charges a monthly fee for each protection policy. The rate depends on the AWS Region and policy family. Account count does not multiply the policy fee, but it can increase the resources and usage billed by AWS Config and the managed firewall service.
Is Firewall Manager included with Shield Advanced?
Yes, for Shield Advanced and AWS WAF policies. The calculator shows that inclusion as a verified state. Other policy families still use their published Firewall Manager rate when you have a Shield Advanced subscription. The Shield Advanced subscription fee and data transfer charges are excluded.
What dependent charges can the calculator include?
The optional estimate supports AWS Config configuration-item changes and rule evaluations, WAF web ACLs, rules and requests, Network Firewall endpoints and traffic, and Route 53 Resolver DNS Firewall resources and queries. Account count multiplies per-account resource inputs, while DNS Firewall domain names remain an organization-wide total.
Which AWS Config recording mode should I choose?
Choose continuous when AWS Config records each resource change. Choose periodic when it records the latest state on a schedule. AWS publishes separate configuration-item rates for these modes, so the selection can change the Config subtotal.
Are third-party firewall Marketplace charges included?
No. The calculator can price the published Firewall Manager policy fee for supported Fortinet and Palo Alto policy types, but it excludes Marketplace software and infrastructure charges.
What costs are excluded from this Firewall Manager estimate?
The estimate excludes third-party Marketplace software and infrastructure, WAF managed rule groups and advanced protections, Network Firewall NAT and cross-AZ transfer, unrelated Route 53 features, support, taxes, credits, private pricing, and negotiated discounts.
Related tools