Top cloud firewall for AWS and GCP under $20k/year

Looking at CloudGuard for AWS/GCP. Need centralized firewall management for about 50 VPCs/VNets across both clouds.

Budget is firm at $20k/year. Need to know if it fits.

Key requirements:
* Automated rule deployment via pipeline (Terraform/Ansible)
* Must not add latency to app deployments
* API-driven, no manual console work for standard changes

What's the real operational overhead?
* How complex is the initial terraform module setup?
* What's the actual deployment time for a rule change across all networks?
* Does the logging integrate cleanly with our existing SIEM (Splunk)?

Seen too many "cloud-native" tools that are just a slow GUI slapped on top. If this is another one, I'll build my own with security groups and network firewalls.