Looking at the firewall vendors that are listed as official partners here, this looks like another pretty security-lite, native product for companies that are just looking to check a compliance box and not a real enterprise offering.

Similar to the AWS WAF, this seems geared for a smaller team that can't afford the time to deploy and manage virtual security appliances.

It looks like they're following the same formula as the WAF on this one by letting partners provide rulesets.

I'm waiting for AWS to really flesh these products out and eat all these "partners" lunches.