AWS Shield
A managed service that protects applications against distributed denial-of-service (DDoS) attacks.
AWS Shield is a managed DDoS protection service with two tiers. Shield Standard is enabled automatically at no extra cost for all customers and defends against common network and transport layer attacks (layers 3 and 4), such as SYN floods and UDP reflection. Shield Advanced is a paid upgrade adding protection against larger, more sophisticated layer 7 (application layer) attacks, near-real-time attack visibility, and access to the AWS DDoS Response Team. The key exam distinction is that Shield guards against volumetric DDoS attacks aimed at overwhelming infrastructure, while AWS WAF filters malicious HTTP/S requests at the application layer. They are often deployed together but are not interchangeable.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →