AWS Network Firewall rule hit counts shipped 17 August 2026 and cannot see the pass rule that shadows your policy
AWS Network Firewall added stateful rule hit counts on 17 August 2026. The visualization reads alert logs, and alert logs never record a pass rule, which is the rule most likely to be shadowing your policy.
