You can deploy the VM-Series firewall on an AWS instance size
with more resources than the minimum VM-Series
System Requirements. If you choose a larger instance size
for the VM-Series firewall model, although the firewall only uses
the max vCPU cores and memory shown in table, it does take advantage of
the faster network performance that AWS provides. If you want to
change the instance type on your VM-Series firewall that is licensed
with the BYOL option, you must deactivate the VM before
you switch the instance type to ensure that your license is valid.
See Upgrade the VM-Series Model to know why.
For guidance with sizing the VM-Series firewall on AWS, refer
to this article.