All 7 AWS WAF & Shield questions
More in AWS WAF & Shield
What is AWS Shield, and what is the difference between Shield Standard and Shield Advanced? How do AWS WAF managed rule groups simplify protecting applications against common, well known attack patterns? How does rate based rules in AWS WAF help mitigate application layer DDoS attacks and abusive traffic patterns? How does AWS WAF Bot Control help distinguish between legitimate automated traffic and malicious bots? How should an organization design a layered defense in depth strategy combining WAF, Shield, security groups, and network ACLs to protect a public facing application?
Advertisement
AWS › AWS WAF & Shield

How does AWS Shield Advanced provide cost protection and access to specialized DDoS response support during a major attack?

Advanced

Answer

Shield Advanced includes cost protection, which credits back the additional charges you might incur from services like CloudFront, Route 53, or Elastic Load Balancing scaling up in response to a DDoS attack, along with twenty four by seven access to the AWS DDoS Response Team, who can help analyze an ongoing attack and assist in crafting effective mitigation rules in real time, providing both financial and expert operational support that goes well beyond what Shield Standard's automatic protection alone offers.
aws shield associate-drt-role --role-arn arn:aws:iam::123456789012:role/DRTAccessRole
Real-world example A company experiencing a massive, sustained DDoS attack against its e commerce platform engages the AWS DDoS Response Team through its Shield Advanced subscription, receiving expert guidance to quickly craft effective WAF rules that successfully mitigate the attack within hours.

Common follow-ups: What specific costs does Shield Advanced's financial protection actually cover?;How do you grant the DDoS Response Team the access they need to help during an active incident?

AWS CloudTrail & Auditing;Amazon CloudFront & Content Delivery
All 7 AWS WAF & Shield questions