AWS Administration - The Definitive Guide - Second Edition

Introduction to AWS Shield

AWS Shield is an extension of AWS WAF, but is targeted to provide security around potential DDoS attacks. It is a fully managed service that provides Always-on detection and automatic mitigations that minimize application downtime and latency. AWS Shield provides two tiers of services: Standard and Advanced:

• AWS Shield Standard: Provided at no additional costs, this service is enabled on your account and AWS services by default, and is designed to protect your web applications against the most common and frequently occurring DDoS attacks.
• AWS Shield Advanced: Designed for providing a higher level of protection for your web applications, AWS Shield Advanced is intended to work with applications that are currently ...