- Manage security rules in all accounts of an AWS Organization
- Security policy (common set of security rules)
- VPC Security Groups for EC2, Application Load Balancer, etc.
- WAF rules
- Shield Advanced
- Network Firewall
- Rules are applied to new resources as they are created (good for compliance) across all and future accounts in an AWS Organization