Description

A rule group contains rules that define how your firewall processes traffic in your VPC. It was detected that the Network Firewall rule group '{AwsNetworkFirewallRuleGroup}' is empty. An empty stateless rule group, when present in a firewall policy, might give the impression that the rule group will process traffic. However, when the stateless rule group is empty, it does not process traffic.

• 

  Recommended Mitigation

  It is recommended to to add a rule group to a Network Firewall policy