# DDoS Mitigation

* To protect your system from DDoS attack:
  * Use **CloudFront for distributing both static and dynamic content**.
  * Use an **ALB with Auto Scaling groups for your EC2 instances**.
  * **Prevent direct Internet traffic to your RDS database** by deploying it to a new private subnet.
  * Set up **alerts in CloudWatch to look for high `Network In` and CPU utilization metrics**.<br>
* An **EFA is a network device that you can attach to your EC2 instance to accelerate HPC and machine learning applications**.
