AWS › AWS WAF & Shield
What is AWS Shield, and what is the difference between Shield Standard and Shield Advanced?
BeginnerAnswer
AWS Shield is a managed service that protects against distributed denial of service, or DDoS, attacks, with Shield Standard providing automatic, always on protection against common, most frequently occurring network and transport layer DDoS attacks at no additional cost to every AWS customer, while Shield Advanced provides more comprehensive protection against larger and more sophisticated attacks, along with additional features like detailed attack diagnostics, cost protection for scaling charges incurred during an attack, and access to the AWS DDoS Response Team.
aws shield describe-subscriptionReal-world example A financial services company subscribes to Shield Advanced to gain access to the DDoS Response Team and financial protection against unexpected scaling costs, given the potentially severe consequences of even a brief service disruption to their business.