Shield Stratus

As described on AWS Marketplace.

Most cloud security tools tell you what already happened. Shield Stratus stops it from happening at all. Deployed directly into AWS VPCs, Shield Stratus enforces real-time network decisions that block known malicious infrastructure before attackers can establish command-and-control or exfiltrate data from your environment. If your workloads can reach the internet, attackers can reach them too. Security Groups and NACLs control access but cannot identify or block malicious infrastructure at global scale.

Shield Stratus operates in two modes. Protect mode actively blocks malicious traffic at the VPC level, preventing C2 callbacks, data exfiltration, and lateral movement across AWS accounts. Observe mode allows traffic to flow while collecting network metadata for threat hunting, compliance auditing, and policy validation. Switch between modes instantly without redeployment or downtime. Organizations typically see malicious outbound connections blocked immediately after deployment.

Highlighted by the publisher on AWS Marketplace.

8.5 Billion IP Threat Intelligence Database: Blocks communication with known malicious infrastructure using 30+ years of continuously refined intelligence.

Autonomous Network Enforcement for the Cloud: Can deploy as a standalone security product, or work in concert with existing firewalls and security solutions. Run in full enforcement or visibility-only mode. Switch instantly without redeploying infrastructure or causing downtime.

Stops the Kill Chain: Prevents command-and-control callbacks, data exfiltration, lateral movement, and access to attacker-controlled infrastructure.

As stated by the publisher on AWS Marketplace.

Hourly users may stop or cancel the service at any time.