</>
Skip to content
AWS lessons (34/47)

AWS — Shield

What is Shield?

DDoS protection service.

Shield Standard

  • Free with AWS services
  • Protection against common attacks
  • Automatic for all customers

Shield Advanced

aws shield create-subscription

Protection

aws shield create-protection \
  --name my-protection \
  --resource-arn arn:aws:elasticloadbalancing:us-east-1:123456789:loadbalancer/app/my-alb/xxx

DDoS response team

aws shield create-protection-group \
  --protection-group-id my-group \
  --pattern ALL \
  --aggregation-type MAX

Best practices

  1. Use Shield Advanced for production
  2. Enable WAF integration
  3. Set up DRT access
  4. Monitor with CloudWatch

Mini Practice

  1. Enable Shield Advanced
  2. Create protection
  3. Set up protection groups
  4. Monitor DDoS metrics

Up Next

Continue with Trusted Advisor - Best Practices.

Related Topics

WAFCodeCommitCodeBuildCodeDeploy

Frequently Asked Questions about Shield

What is Shield in AWS?

Shield is a fundamental concept in AWS. This lesson explains it step by step with clear examples, making it easy for beginners to understand.

How do I learn Shield?

Start by reading the explanation above, then try the code examples. Practice by modifying the examples and experimenting with different values. Hands-on practice is the best way to learn Shield.

Why is Shield important in AWS?

Shield is essential for AWS development. Understanding this concept will help you write better code and solve real-world problems more effectively.