Egress Transport Layer Security (TLS) inspection for AWS Network Firewall is now available in all AWS Regions where AWS Network Firewall is available today, including the AWS GovCloud (US) Regions. This launch allows you to use AWS Network Firewall to decrypt TLS sessions and inspect inbound and outbound VPC traffic without the need to deploy or manage any additional network security infrastructure. Encryption and decryption happen on the same firewall instance natively, so traffic doesn’t cross any network boundaries.
Source:: Amazon AWS