- Benefits:

• Seamless integration and implementation.

Your AWS resources are automatically protected with AWS Shield Standard and are protected against the most common and frequent DDoS attacks at the network and transport layers. You can achieve an even higher level of defense by simply enabling AWS Shield advanced protection for the Elastic IP, Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, or Amazon Route 53 resources you want to protect using the management console or APIs. Enabling these protections does not require any routing changes.

• Customizable protection.

With AWS Shield Advanced, you have the flexibility to choose the resources you want to protect to secure your infrastructure (Layers 3 and 4). You can create custom rules with AWS WAF to mitigate sophisticated application-layer attacks. These customizable rules can be deployed instantly, enabling rapid attack mitigation. You can proactively set rules to automatically block invalid traffic or respond to incidents as they occur. Additionally, you have 24/7 access to the AWS Shield Response Team (SRT), which can create rules to mitigate application-layer DDoS attacks.

• Managed protection and visibility against attacks.

With AWS Shield Standard, you get heuristics-based network flow monitoring and continuously active inline mitigation against the most common and frequently occurring DDoS attacks at the network and transport layers. AWS Shield Advanced provides enhanced detection for specific functions and employs advanced mitigation and routing techniques for large or sophisticated attacks. You also have 24/7 access to the AWS Shield Response Team (SRT) for manual mitigation of edge cases that impact your availability. AWS Shield Advanced also provides visibility and insight into all your DDoS incidents through AWS CloudWatch diagnostics and attack metrics. Finally, you can also view the DDoS threat environment on AWS with the Global Threat Environment Dashboard.

• Economic.

AWS Shield Standard is automatically enabled for all AWS customers at no additional cost. With AWS Shield Advanced, customers get AWS WAF and AWS Firewall Manager at no additional cost for use on resources protected by AWS Shield Advanced, as described on the Shield pricing page. Additionally, you get “DDoS Cost Protection for Scalability,” a feature that protects your AWS account from usage spikes resulting from a DDoS attack on your protected EC2, Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, and Amazon Route 53 resources protected by AWS Shield Advanced.