AWS Network Firewall — Form-to-Wizard Redesign
Simplifying a complex network security configuration experience through a guided six-step workflow for creating firewall rule groups.
Role
Tools
Team
Project Overview
AWS Network Firewall is a cloud security service that helps organizations protect their networks by monitoring and controlling traffic. Over time, the Create Rule Group form had grown increasingly complex as new features were added, resulting in a lengthy, overwhelming experience with limited guidance and progress visibility.
As Lead UX Designer, I redesigned the experience into a guided six-step workflow, simplifying configuration, reducing cognitive load, and improving navigation while aligning the interface with AWS Cloudscape Design System 3.0.
6
Workflow Steps Designed
3
AWS Security Consoles Researched
1
Redesigned Creation Workflow
Problem Statement
AWS Network Firewall's Create Rule Group form had become increasingly complex as new features were added, resulting in a lengthy, time-consuming experience. Security and networking professionals had to navigate a dense, single-page form without clear steps, progress indicators, or sufficient guidance.
The original form presented numerous configuration options at once, increasing cognitive load.
A six-step wizard replaced the single-page form, breaking complex tasks into manageable steps.
Progress indicators and step-by-step navigation improved orientation throughout the process.
Progressive disclosure simplified configuration by presenting relevant options only when needed.
Clearer instructions and validation feedback helped users navigate requirements and avoid errors.
The redesigned experience aligned with AWS Cloudscape Design System 3.0, establishing more consistent interaction patterns.
Research & Discovery
I conducted a comparative UX audit of AWS security consoles, including VPC, WAF & Shield, and Firewall Manager, to identify established patterns for managing complex configurations.
3
Console Groups Researched
1
Existing Workflow Audited
3.0
Cloudscape Design System
Key Findings
Lengthy forms increased cognitive load by presenting too many configuration options at once.
The existing experience lacked clear steps and progress indicators.
Related AWS consoles provided established patterns for guided workflows.
Progressive disclosure could simplify complex tasks by revealing relevant settings at each step.
Consistent Cloudscape components could improve navigation, clarity, and usability.
Ideation
I explored ways to simplify the Create Rule Group experience using established AWS design patterns. After reviewing the existing form and collaborating with developers and design stakeholders, I proposed replacing the single-page layout with a guided, multi-step wizard.
The direction focused on reducing cognitive load, improving progress visibility, simplifying rule selection, and using progressive disclosure to make complex configurations easier to navigate.
User Flow
I restructured the original single-page form into a guided workflow that breaks rule group creation into smaller, manageable tasks. Each step provides clearer orientation, while optional configurations appear only when relevant.
The redesigned flow follows this sequence:
Choose rule group type
Configure rules
Add encryption (optional)
Add tags (optional)
Review and create
Confirmation
Wireframing
Transformed a dense, single-page form into a structured, multi-step workflow with clearer navigation and progressive disclosure.
I explored how to transform the original single-page form into a guided, multi-step wizard. The redesigned screens demonstrate how I organized complex configurations, introduced clearer navigation, and incorporated validation and error states to support users throughout the process.
Interface Design
Using AWS Cloudscape Design System 3.0, I designed a guided wizard that simplified complex firewall configurations through clear information hierarchy, consistent components, and progressive disclosure.
The interface introduced step-by-step navigation, simplified rule group selection, contextual guidance, and validation feedback to create a more intuitive and consistent experience.
Iterations & Refinements
Refinement 1: Guided Navigation
Reorganized the lengthy single-page form into a six-step wizard with visible progress, clearer navigation, and the ability to return to previous steps.
Refinement 2: Progressive Disclosure
Separated advanced encryption settings and optional tags from essential configuration tasks, allowing users to focus on relevant options without unnecessary complexity.
Refinement 3: Validation & Error Handling
Incorporated contextual guidance, field requirements, and error states to help users identify configuration issues before creating a rule group.
Final Design
The final design transforms AWS Network Firewall’s complex rule group creation process into an intuitive six-step workflow, making configuration easier to navigate and manage. Key features include:
Six-step guided workflow with clear progress navigation
Progressive disclosure to reduce cognitive load
Improved information hierarchy and field organization
Contextual guidance for complex configuration options
Optional advanced settings for encryption and resource tags
Consolidated review page with options to edit previous steps
Consistent interface built with the AWS Cloudscape Design System
Impact
Lessons Learned
Simplify complexity without sacrificing functionality. Breaking a dense configuration form into manageable steps made complex workflows easier to navigate while preserving advanced capabilities.
Progressive disclosure creates clarity. Presenting information when it's needed helps reduce cognitive load without overwhelming users with every option at once.
Consistency strengthens the experience. Leveraging AWS Cloudscape patterns and studying related security consoles helped create a more familiar, cohesive workflow.
Design validation matters. While early feedback was positive, formal usability testing and post-launch metrics would help validate the redesign and identify opportunities for improvement.
Next Steps
Conduct usability testing with AWS customers to identify friction points in the six-step workflow.
Analyze completion rates, configuration errors, and time on task to measure the redesign's effectiveness.
Refine complex rule configuration interactions based on customer feedback and usage patterns.
Explore contextual guidance and smarter defaults to help customers configure firewall rules with greater confidence.
Continue improving consistency and accessibility across AWS security console experiences.
