AWS Shield Specialized2016年〜
A managed service that protects applications from DDoS attacks
What It Does
AWS Shield is a managed service that protects applications from DDoS (Distributed Denial of Service) attacks. Shield Standard is automatically applied to all AWS accounts at no cost, defending against common DDoS attacks. Shield Advanced provides advanced attack detection, real-time notifications, and access to the DDoS Response Team (DRT).
Use Cases
DDoS protection for websites and APIs, attack mitigation in front of CloudFront and ALB, ensuring game server availability, and protecting financial services infrastructure.
Everyday Analogy
Think of a building security system. Standard provides basic security cameras and locks (automatic defense), while Advanced includes 24/7 security guards (DRT), advanced intrusion detection, and insurance (cost protection).
What Is Shield?
AWS Shield is a defense service against DDoS attacks. Shield Standard is automatically applied to all AWS accounts at no extra charge, protecting against common network layer (L3) and transport layer (L4) DDoS attacks. For more advanced protection, enable Shield Advanced.
Shield Advanced Features
Shield Advanced provides application layer (L7) attack detection, real-time attack metrics, and 24/7 access to the AWS DDoS Response Team (DRT). You can also receive credits for scaling costs (EC2, ELB, CloudFront, Route 53) caused by DDoS attacks. WAF charges are included with Shield Advanced. For reference material on Shield Advanced features, related books on Amazon are a useful resource.
Getting Started
Shield Standard requires no setup - it's automatically applied. Shield Advanced is enabled in the Shield console, where you specify the resources to protect (CloudFront, ALB, Elastic IP, etc.). It costs $3,000/month plus data transfer charges and requires a 1-year subscription.
Things to Watch Out For
- Shield Standard is automatically applied to all accounts at no cost - no additional setup needed
- Shield Advanced costs $3,000/month plus data transfer charges with a 1-year commitment. May be overkill for small sites
