They could consider organizing and enhancing documentation in a more structured and chronological manner. The goal would be to transform it into a live documentation resource that we frequently rely on when encountering errors. Currently, when we run into issues, our first instinct is to perform a Google search to find relevant information. It might be more efficient if we could align our documentation with specific sections or categories, such as error types or network-related topics which would ultimately lead to better issue detection and resolution.

AWS Firewall Manager could provide more automation. It needs to be more employee-friendly, and the security management could be more efficient.

I would like to see AWS add some UTM features to the firewall. It would also be great if AWS Firewall had native IPS/IDS. They have the separate IPS/IDS, GuardDuty. 

In AWS, there are so many features that many users get confused about what to use and what not to use. For example, AWS Firewall Manager has perhaps 100 features but only a maximum of 15 to 20 would be generally used. I would say that 80% of the features confuse the users, which makes the system more complicated than it needs to be.

The price of this solution could be reduced.

The system should be more customizable.

My experience has been with small-scale infrastructure and it works very well.

The logging needs improvement. The Firewall Manager logs are fine but when it comes to the actual logs for the firewall, that's where there is a problem. Enabling and configuring the logging is not that straightforward.