Security, Identity & Compliance
AWS Shield
Managed DDoS protection.
Official docsOverview
Shield Standard is automatic + free; Shield Advanced adds layer-7 protection, 24/7 SRT and cost protection.
When to use it
- Internet-facing apps
- Regulated workloads needing DDoS SLAs
Setup
- Subscribe to Shield Advanced and add protected resources (ALB, CloudFront, EIP, Route 53).
How to use
Health-based detection
Associate Route 53 health checks to detect attacks early.
QA use cases
- Validate rate-limit + Shield response in pre-prod traffic surge tests.