Shield + WAF for DDoS Mitigation

  • Shield is a managed DDoS protection service that is available in two tiers: Standard and Advanced.

  • Shield Standard applies always-on detection and inline mitigation techniques, such as deterministic packet filtering and priority-based traffic shaping, to minimize application downtime and latency.

  • Shield Standard is included automatically and transparently to your ELBs, CloudFront distributions, and Route 53 resources at no additional cost and you receive comprehensive availability protection against all known infrastructure layer attacks.

  • Customers who have the technical expertise to manage their own monitoring and mitigation of application layer attacks can use Shield together with WAF rules to create a comprehensive DDoS attack mitigation strategy.

PreviousControlling access from VPC endpoints with bucket policiesNextTurn off Access to your Instance Metadata

Last updated