Table of contents
1.
Introduction
2.
AWS Shield
3.
Requesting a credit in AWS Shield Advanced
3.1.
Prerequisites for requesting a credit
3.2.
How to apply for a credit
4.
Benefits of AWS Shield
4.1.
Seamless integration and deployment
4.2.
Customizable Protection
4.3.
Cost-Efficient
5.
Examples of Shield Advanced use cases
6.
FAQs
6.1.
What is the use of the AWS shield?
6.2.
How does AWS shield advanced mitigate DDoS attacks?
6.3.
What are the additional AWS Shield advanced charges?
7.
Conclusions
Last Updated: Mar 27, 2024
Easy

AWS Shield

Career growth poll
Do you think IIT Guwahati certified course can help you in your career?

Introduction

Amazon Web Service is nothing but Cloud computing which is used for storing and accessing data over the internet. It is a platform that offers flexibility, reliability, scalability, easy use, and cost-effective cloud computing solutions.

We have been living in a digital world. We need everything in a digital model, whether shopping or anything. We tend to focus on making digital payments. Now everything has been online; there is a chance one might face fraud from someone. So, here comes AWS Shield, which will prevent these incidents from happening.

AWS Shield

AWS Shield is a managed Distributed Denial of Service (DDOS) protection service that safeguards the applications running on AWS. A Shield provides always-on detection and automatic inline mitigations of application downtime and latency.

AWS Shield comes in two-tier - Standard and Advanced. AWS Standard Shield defends against the most common network and transport layer DDoS attacks that target the website or application. AWS Shield Advanced protects your web application hosted anywhere globally by deploying Amazon CloudFront in front of your application.

Requesting a credit in AWS Shield Advanced

Suppose you have a subscription to AWS Shield Advanced, and you experience a DDOS attack that increases the utilization of a Shield Advance protected resource. The user can request a credit for charges related to the increased utilization to the extent to which Shield Advanced does not mitigate. 

Prerequisites for requesting a credit

  1. The user must have added Advanced Shield protection to the resource for which the user wants to request a credit. Protected resources added during an attack that is not eligible for cost protection.
  2. For applicable CloudFront and Application Load Balancer protected resources, the user must have associated an AWS WAF web ACL and implemented a rate-based rule in the web ACL.
  3. The user has implemented appropriate best practices in AWS to configure the application to minimize the cost during a DDoS attack.

How to apply for a credit

To apply for credit, submit a billing case through AWS Support Center and include the following in your request.

  1. The word "DDoS Concession" is in the subject line.
  2. The dates and times of each event are available for which you're requesting a credit.
  3. The AWS services and specific resources that were affected.

Benefits of AWS Shield

Seamless integration and deployment

AWS Shield Standard automatically protects your AWS resources, which protects them from the most prevalent network and transport layer DDoS attacks. Simply enable AWS Shield Advanced protection for Elastic IP, Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, or Amazon Route 53 services you want to protect using the AWS Management Console or APIs to gain a greater level of defense. These safeguards can be enabled without requiring any routing changes.

Customizable Protection

You can pick which resources to protect for infrastructure (Layer 3 and 4) protection with AWS Shield Advanced. AWS WAF allows you to create custom rules to protect against advanced application-layer attacks. These flexible rules can be implemented in seconds and quick counterattacks. You can create rules to prevent harmful traffic or respond to events. You also access the AWS Shield Response Team (SRT) 24 hours a day, seven days a week, setting rules on your application-layer DDoS attacks.

Cost-Efficient

AWS Shield Standard is activated by default for all AWS customers at no extra charge. Customers who purchase AWS Shield Advanced get AWS WAF and AWS Firewall Manager for free when they use them on resources protected by AWS Shield Advanced, as indicated on the Shield price page. You also get "DDoS cost protection for scaling," which protects your AWS bill from use spikes caused by a DDoS attack on your AWS Shield Advanced protected EC2, Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, and Amazon Route 53 services.

Examples of Shield Advanced use cases

You can use Shield Advanced to protect your resources in many scenarios. Here are some cases where you should use other services or combine other services with Shield Advanced to offer the best protection.

FAQs

What is the use of the AWS shield?

AWS Shield is a service built on AWS to protect mainly against DDoS attacks.
 

How does AWS shield advanced mitigate DDoS attacks?

AWS provides automatic attack detection and proactively applies mitigations on your behalf.

 

What are the additional AWS Shield advanced charges?

AWS Shield Advanced charges the standard fees for Elastic Load Balancing(ELB), Amazon CloudFront, Amazon Route 53, Amazon Elastic Compute Cloud (EC2), and AWS Global Accelerator.

Conclusions

In this article, we have covered the AWS Shield. We have explained what AWS and AWS Shield are. We also explained how to request a credit in AWS Shield and the user's prerequisites to request a credit. We also discussed how to apply for credit. We also discussed the used Advanced cases of AWS Shield.

Refer to our guided paths on the Coding Ninjas Studio platform to learn more about DSA, DBMS, Competitive Programming, Python, Java, JavaScript, etc.

Refer to the links problemstop 100 SQL problemsresources, and mock tests to enhance your knowledge.

For placement preparations, visit interview experiences and interview bundle.

We hope that this blog has helped you in enhancing your knowledge. If you liked this article, please give it a thumbs up, which might help me and other ninjas grow. "Happy Coding!"

Live masterclass