Patent ID: 11916880
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. A method comprising:
obtaining, at a firewall-controller system, firewall rules for a firewall device to evaluate traffic communicated with a computing resource of a user, the firewall rules being defined in a first programming language, the firewall-controller system being a control plane system that is remote from the firewall device and the computing resource, the firewall rules being defined in a template-based format, wherein at least one of the firewall rules define, in the template-based format:
an allowed protocol type for received data packets;
an allowed destination port value for the received data packets; and
an allowed classless inter-domain routing (CIDR) block for the received data packets;

prior to the firewall rules being sent to the firewall device, generating, using a compiler associated with the firewall-controller system and the firewall rules in the first programming language, machine code that represents the firewall rules in a second programming language, wherein the machine code in the second programming language (i) includes indications of the allowed protocol type, the allowed destination port, and the allowed CIDR block, and (ii) is configured to be executed by the firewall device to allow the received packets representing the allowed protocol type, the allowed destination port, and the allowed CIDR block; and
sending the machine code representing the firewall rules from the firewall-controller system and to the firewall device associated with the computing resource, the firewall device being configured to execute the machine code to implement the firewall rules.